castelfiorentino.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2e:73:ce:d9:42:ac:2b:48:dd:64:27:01:65:25:97:07:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelfiorentino.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2e:73:ce:d9:42:ac:2b:48:dd:64:27:01:65:25:97:07:78
Serial Number (int): 364256067844637505873634022050136734500728
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:dc:67:4a:c4:37:49:61:e6:bb:1f:bb:d8:e0:a6:c2:10:b4:cc:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:cc:aa:ad:75:a2:33:39:9d:aa:b5:19:0d:04:fc:c6:74:c6:0e:9d
Fingerprint (sha256): 24:5e:16:25:24:06:13:ce:f8:75:70:ef:bc:43:66:12:28:06:48:5b:eb:ab:33:b5:47:0a:c3:ba:f2:32:71:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelfiorentino.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelfiorentino.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelfiorentino.org

Other certificates including the domain name castelfiorentino.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelfiorentino.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364256067844637505873634022050136734500728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:45:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelfiorentino.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759713611910785216213261784774424621642419380805544391308423039653428484255047110368811766021631623852734500474042292000448272753383597877001075443758863321382696548157444910328787386714893279045189186795188953913846713567327792830327830181592234601827611049474903949930444968816591273366110897151805527057911957973942163971352052693596485586480422598710966075701995371172158153746555141814917032453455686010335320535226777669058012491420277535222635611739533739523747995619297509079527637423015226819417721220219392431406290647127703616663715785714332912670140659081423578320646502857856099285225535094872008935584768538891381292842540082326235230451991202992006154404461114413489558105087595907478191648436656723785620465930929892942297243964948372890911136743957625724668044959934909235777036878440914760637447745006711353712840765213632818086392232673901457244595574098107447851131108571019741706529318934516273398191090430329695117475557727554466735705596252909890016557687404796910586354942687951452410929586406459978438572928577821202749924560005754738396409980052111896634824150924747759026503604598268983416219523312109842224082068154015152872725338308280955327060994786306200274294704977709894825272642116283803447982321077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3edc674ac4374961e6bb1fbbd8e0a6c210b4cc00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelfiorentino.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec90121450000040300483046022100a8e5fa2a313926f83f25175e19cf409a6c9f24e62ab4bdb3e0b6a80b186f49c7022100a8bb58836b0f411e562dbd586e1e5b7671a76f0d72c4c456b0c39532137bb3d50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec90121e4000004030048304602210090d39bff7d4e7f2feb87dd6481abf26601f1e8ea23dd51944136cb4bb886f96502210084cf11d9473e2b2adbe99544e66e0c17107bc5b157eabfe588e9f597f3fd9d24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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