fad.unich.it

Issued by R3

About this certificate

This digital certificate with serial number 04:77:4f:b9:ca:1a:43:ef:96:c1:a9:25:7c:ff:2d:d0:01:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fad.unich.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:4f:b9:ca:1a:43:ef:96:c1:a9:25:7c:ff:2d:d0:01:d9
Serial Number (int): 389048719076346198339572453946923036967385
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:b6:28:2f:41:70:ea:53:66:6c:c7:58:4a:ce:db:09:ee:28:93:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:be:d7:ee:c1:06:38:e7:86:7e:c9:fb:02:2e:e4:06:3f:a1:95:66
Fingerprint (sha256): 20:cc:a3:06:e9:3c:58:3a:a7:77:aa:8d:e7:df:eb:56:b8:5f:1c:0f:d8:2c:b8:cb:5c:08:6c:38:38:f5:69:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fad.unich.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fad.unich.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fad.unich.it

Other certificates including the domain name unich.it

(limited to 100 certificates)
concorsigelmini2018.unich.it
segnalazioni.pensplan.com
fad.unich.it
amministrazionetrasparente.unich.it
mail.studenti.unich.it
fad.unich.it
amministrazionetrasparente.unich.it
whistleblowing.mairetecnimont.com
*.unich.it
www-thch.unich.it
core.unich.it
servizipersonale.unich.it
servizipersonale.unich.it
webmail-prev.unich.it
whistleblowing.unich.it
amministrazionetrasparente.unich.it
fmlab.unich.it
fmlab.unich.it
fad.unich.it
www.sci.unich.it
helpstation.unich.it
economia.unich.it
fad.unich.it
core.unich.it
clei.unich.it
helpstation.unich.it
sviluppo.core.unich.it
www.sci.unich.it
core.unich.it
helpstation.unich.it
mail.unich.it
economia.unich.it
whistleblowing.giustizia.it
decsrv-35.unich.it
www3.unich.it
zeus.unich.it
whistleblowing.giustizia.it
owncloud.unich.it
whistleblowing.giustizia.it
zeus.unich.it
segnalazioni.pensplan.com
gitlab.dec.unich.it
fmlab.unich.it
*.unich.it
www.sci.unich.it
www.atmo.unich.it
amministrazionetrasparente.unich.it
decsrv-35.unich.it
economia.unich.it
fad.unich.it
whistleblowing.giustizia.it
economia.unich.it
ricerca.unich.it
fad.unich.it
economia.unich.it
webmail.unich.it
clei.unich.it
fad.unich.it
www-thch.unich.it
www.sci.unich.it
economia.unich.it
helpstation.unich.it
www.atmo.unich.it
qr.unich.it
concorsigelmini.unich.it
webmail.unich.it
clei.unich.it
segi.unich.it
helpstation.unich.it
decsrv-35.unich.it
www.sci.unich.it
economia.unich.it
elearning.unich.it
helpstation.unich.it
www-thch.unich.it
core.unich.it
whistleblowing.giustizia.it
economia.unich.it
segnalazioni.pensplan.com
zeus.unich.it
fmlab.unich.it
gasl.unich.it
nottedellaricerca.unich.it
whistleblowing.giustizia.it
whistleblowing.unich.it
whistleblowing.unich.it
nottedellaricerca.unich.it
amministrazionetrasparente.unich.it
core.unich.it
amministrazionetrasparente.unich.it
fmlab.unich.it
whistleblowing.giustizia.it
segi.unich.it
decsrv-35.unich.it
helpdesk.unich.it
whistleblowing.giustizia.it
zeus.unich.it
helpstation.unich.it
economia.unich.it
whistleblowing.giustizia.it

Certificate

The complete raw certificate details for fad.unich.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389048719076346198339572453946923036967385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 23:10:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 23:10:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fad.unich.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788435616281849613361259862203325779953398454388581676343576514652980194438850355085070469339277515235056548421609782050712153641247659694982781519518733655978726306627925743595968017374652005487386256910328383327508229630804187078909259716170965203396393716099198456605566056387583698940286871017852724356185049247279758816509724652858064342264072664173154002876674580036188163080390440315025468635426408759189955879274189093512176081105015814999395820393053403383894688197058096929977160963720376274106272706269963316870500705860904550995848519506822554621411636201853294312126561204427436747822680855545458525912481527388017108845072281090522098230786195866436327992829675471243282049809498052163867197511971885254154498739827787557686475615932370056475734195148412528346501823555031783326569733315737250890692641452569547757940378359489144904228581955644217637456976422115336798527479227649344614450337937238630654217119412200987229040549775637738176914733022671352866853403812621530687970313294384306442778701228629071177165556129491777896853300491979095757353851409835712200043899473090027716442552333913318389850754000892938728741422179532700088311594274185874675535343004445261410798504347591910664819670997389016170752058133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69b6282f4170ea53666cc7584acedb09ee289381
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fad.unich.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8193a7ee000004030047304502200250db44b33b4e43bbd04be7afa648432338f767a77fee297ccbfacc6f07a21f02210093d9a1734b3a5ba35363835086b23c22d5dd8760ef81277b3537320b15df95e9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a8193a82200000403004730450220403fa7e3ba631798e759fc0419caee95e6b4c6bd0be207902f26a71d35662066022100a9bf14b30380026f94c109fa7b2a441b9c88d8d42a4ea523e209a163f657350f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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