francavillaalmare.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:93:60:51:13:90:02:27:dd:35:72:4e:64:c7:a2:e7:24:ef was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=francavillaalmare.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:93:60:51:13:90:02:27:dd:35:72:4e:64:c7:a2:e7:24:efSerial Number (int): 398598678524835138994639658861408821912815
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: da:e6:66:86:ba:40:63:3e:29:9c:fa:48:2b:f1:0b:8d:6e:28:54:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 98:d3:1e:c2:a9:f6:6c:73:83:f4:36:5b:0b:f5:5a:95:fa:9d:7d:2f
Fingerprint (sha256): 23:01:4d:53:89:63:4d:a3:20:ae:f2:74:f6:1f:b2:fd:92:25:64:2a:a6:a5:3a:73:cc:44:f3:f8:0d:d8:f9:1f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate francavillaalmare.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for francavillaalmare.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
francavillaalmare.org
Other certificates including the domain name francavillaalmare.org
(limited to 100 certificates)
wise.bible
francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
bitcoinfx.exchange
francavillaalmare.org
bodybuildingtips.online
www.francavillaalmare.org
francavillaalmare.org
mystic.house
www.francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
www.lailaa.nl
francavillaalmare.org
francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
bitcoinfx.exchange
francavillaalmare.org
bodybuildingtips.online
www.francavillaalmare.org
francavillaalmare.org
mystic.house
www.francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
www.francavillaalmare.org
francavillaalmare.org
www.lailaa.nl
francavillaalmare.org
Certificate
The complete raw certificate details for francavillaalmare.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISBJNgUROQAifdNXJOZMei5yTvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MzAxNTQ0MjhaFw0x OTEyMjkxNTQ0MjhaMCAxHjAcBgNVBAMTFWZyYW5jYXZpbGxhYWxtYXJlLm9yZzCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPrHcg2i7I5q34OJKCp5rwnE tkX/wZ8v4bakEfXPuhavAlasNVW0+XpPjuoVfSvMofU3YTPGIT12MUkETCA1trPD K9EDVC6ZYvsmtgIs4cMYKUnywsoX0LIgZhbl8N4YnGDZtGV+riGLhkJSoE/BShTl lmh3CjSG02z/ntIVvp0YhYghT4++NyFBPho2wT58wUKvkRyZ1OrEY+2iguHQQVFd ZfGjNtZw0RLGoLjk6BF0Mgwbgmg22FSTUaIi0+MOP+aSvXPukys848tewkGhYKB1 bzGrqg+zKLS6WS8Jvur04MFZrAyFP9xfFgjIQ3RdFCq9aYFaaNSiufVVJ3Mm0QXi IIXp31S3W7auyelIkblQc9M3be5v5oMqQDiDx8xLtbqQ7ifNNAHmC563DcwMFBoS ndWmI3aSbPv6PLvdJId4YDfLowc/cVsD46wyZIbCL0IpotNII4lQTfGQzcEUUGgH iM0UEoDeDdFiI/Rj2EWrk6EdRdUx81PQBrxQtiJaeNcKr8nqxL0fB+ykzg2qQWuq wYHYyeJUuYsjd/+KmplOZN3p57Rj0fwi+vEj3DWAuMwoBbtPegmFxC9M98bzYWP9 DiHnCus+kQWS0iZ8SxtqFPXIhYNqixzmSAygmh3thAKEG2Oaz8TEFmSQhVs8ZS8B bfa96jlJsFmA5fM9HFfrAgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFNrmZoa6QGM+KZz6SCvxC41uKFQYMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVZnJhbmNhdmls bGFhbG1hcmUub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFtgw8asAAABAMARzBFAiEA1LjoWDXaq/dmqM5I85yiAi81u3giJi8B aFEW+w1wU5ECIFUS/gUfvCGxS1GVbivB9MGzVIFYaz/kYmaDPZkuAImQAHYAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFtgw8bgQAABAMARzBFAiEA gFi9Pmv2/HdIlPJKRulJjy7TVoUpGwgwQCueZi3AhHwCIBco+qqmdAhRAoacGeLu M1eNy+QOrGwDp+BGjhnomID/MA0GCSqGSIb3DQEBCwUAA4IBAQA/Wu134tSfa7O9 H2g7oh4ez7mj5wMKodb+Q2w0nlVU+PZbSP9o+ZVF/JeM2LY9REPOa8bQ19952lUx RjPDoeXY9SAFey8Nq1eddgs1RTQxpV4CK63Xhohu5CZ0ryR/ka+viwKZ/4OBenkz //rMNNMvm1dxXghjlMYy6uSJKXQRhIBZ7ydpJz6Ezl6lUvHG+40qT6uWlJ/pjMZ6 EJnWM1A6S0+u7XjhMwNv+X/Bir9LEX/4bG7SqmzcRkZ9kqiBR5Nu2+UdsuzxpmpS 0GGJc8mdc5MSGnnsYoJxzHKWN/4ztpjxEh9vW/W6aPG8+/ghZ0ncrvUqUrhjiEia C6bX+zaI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+sdyDaLsjmrfg4koKnmv CcS2Rf/Bny/htqQR9c+6Fq8CVqw1VbT5ek+O6hV9K8yh9TdhM8YhPXYxSQRMIDW2 s8Mr0QNULpli+ya2AizhwxgpSfLCyhfQsiBmFuXw3hicYNm0ZX6uIYuGQlKgT8FK FOWWaHcKNIbTbP+e0hW+nRiFiCFPj743IUE+GjbBPnzBQq+RHJnU6sRj7aKC4dBB UV1l8aM21nDREsaguOToEXQyDBuCaDbYVJNRoiLT4w4/5pK9c+6TKzzjy17CQaFg oHVvMauqD7MotLpZLwm+6vTgwVmsDIU/3F8WCMhDdF0UKr1pgVpo1KK59VUncybR BeIghenfVLdbtq7J6UiRuVBz0zdt7m/mgypAOIPHzEu1upDuJ800AeYLnrcNzAwU GhKd1aYjdpJs+/o8u90kh3hgN8ujBz9xWwPjrDJkhsIvQimi00gjiVBN8ZDNwRRQ aAeIzRQSgN4N0WIj9GPYRauToR1F1THzU9AGvFC2Ilp41wqvyerEvR8H7KTODapB a6rBgdjJ4lS5iyN3/4qamU5k3enntGPR/CL68SPcNYC4zCgFu096CYXEL0z3xvNh Y/0OIecK6z6RBZLSJnxLG2oU9ciFg2qLHOZIDKCaHe2EAoQbY5rPxMQWZJCFWzxl LwFt9r3qOUmwWYDl8z0cV+sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398598678524835138994639658861408821912815 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 15:44:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 15:44:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'francavillaalmare.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023089402688266741544281539989607857201120777969542783392228757047551687766072268210536507287582321811007998426218839873489284696730597398172625373088442162182908376390820668210177784322605758783151990134418686450697116133125375617055408844540765587211189826603825307690119775444586388228546275239452844159976102949405366502171705348189843836044700830418172660116975677844973996605319232905129546987972752897050848650156073083591439973524730246735795240710196179381560645991374968752741221888417321871070743280433075927429818810188943231597249527107961680535185885365367195096775815363818330056689802708307415230104741061153520077001771020820242199163673016159066731422194039578954219416653687887759204574795624294521884276394148187981371323959241127265291942496049847278339574863080072221494664799175041584646801516303140206735895857108073501981998538702273270313057884616808003941332818801689908061649167594055555930455278515103254621140510518937960241176276185388488937912773728554663552857298462782365094113019712413392649755245898848937635258331232032392935352949757293913612465027216464406598123912015800279483885366919227680811471315112726091323496426719138560292764661488606159071018444114058632613751357108441916350480013291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dae66686ba40633e299cfa482bf10b8d6e285418 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francavillaalmare.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d830f1ab00000040300473045022100d4b8e85835daabf766a8ce48f39ca2022f35bb7822262f01685116fb0d70539102205512fe051fbc21b14b51956e2bc1f4c1b35481586b3fe46266833d992e0089900076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d830f1b8100000403004730450221008058bd3e6bf6fc774894f24a46e9498f2ed35685291b0830402b9e662dc0847c02201728faaaa674085102869c19e2ee33578dcbe40eac6c03a7e0468e19e89880ff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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