www.roccabascerana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:63:81:7d:e7:dd:88:6c:ca:28:8f:56:0c:1f:2f:d4:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.roccabascerana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:63:81:7d:e7:dd:88:6c:ca:28:8f:56:0c:1f:2f:d4:82
Serial Number (int): 261469123726829664716133850769967471907970
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:5f:f5:47:d7:e9:10:be:df:29:3a:78:b6:fa:54:bc:c7:b9:92:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:ef:39:86:54:27:09:43:b0:7b:61:e6:81:02:6c:ca:3a:e8:53:1d
Fingerprint (sha256): 22:f0:f4:c3:4e:cd:dd:fc:77:40:73:e4:28:e0:25:b7:a1:22:1e:f0:b4:20:29:06:f8:3a:82:29:29:88:c9:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.roccabascerana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.roccabascerana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.roccabascerana.com

Other certificates including the domain name roccabascerana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.roccabascerana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261469123726829664716133850769967471907970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 16:19:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 16:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.roccabascerana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981947844414712573945801523966899416584796223847779188930436595915759877049836664487626852847036661171317039322406597264400881586768093302919704176396370018147003286466911613883570374264120073520063379453618745472896859206856244901975366453950813021862912614991571124451617627229599732086626310247915402397152144558150731040298165448067985580333968438184114386937914658363324051872788629241536446352184573340149490965375552028623693882388090764800473242671416795729253232365741497009839939598653057655351496240198530034865924232131057707873894091673497662044498058986104779308828565953328896542593486757933255722599137233694234496106481628977550911025308635991072370065709544071462353078090157258431062540642368178810256440664622097332157878496546899449872138003771266245265972124329082209565375634729085817694718672869602399868738531138814365302453485213684314972615295005968420585649269698749228319070200874415524538553233467577867985296891890159476637425525196786906514401882513615549817333631302654886784757951300161197386428600667839928086536510130278479123467801086439555992995342107212348227752179877065594353675706822033968565987438874975912971636825223914048157607090194974828351299376810568477369623476756046898449164939733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							345ff547d7e910bedf293a78b6fa54bcc7b99210
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roccabascerana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2f4bccf10000040300483046022100d8aca5b6f0f4404f08b9478874f59ef859782437090fcdb54a538176cc84f32d022100855a9d7f4772639fa84e33887a6dad436c977c7297611e14239fed740c32bffe007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2f4bccdf000004030046304402204bff878bb17c25d06a7b2b153e4262fe50b6f88311cccb65a3917776bd236b43022076b6e21ef5d0142ce8a32d186cf2b7034cdf03d1a4875ed282d10611984ac407
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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