lavoriagricoli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:ae:28:3c:07:0a:74:78:b4:ff:00:a5:23:f8:1f:a9:ca was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lavoriagricoli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:ae:28:3c:07:0a:74:78:b4:ff:00:a5:23:f8:1f:a9:ca
Serial Number (int): 322478896054772050667022288179566565370314
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:3b:8f:85:be:89:51:5c:5a:2c:79:62:84:3d:38:a4:4c:63:57:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:8c:df:bc:59:6f:ba:23:a0:cd:f8:81:59:7e:c6:5d:c4:40:23:2a
Fingerprint (sha256): 25:12:a3:ec:fe:9e:71:33:d9:64:1e:be:31:2f:a9:02:5b:7b:2d:b0:d1:18:3b:ee:20:95:56:83:15:b1:6b:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lavoriagricoli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lavoriagricoli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lavoriagricoli.com

Other certificates including the domain name lavoriagricoli.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lavoriagricoli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322478896054772050667022288179566565370314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 09:41:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 09:41:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lavoriagricoli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866133758503437287203909853866908102154342495755160530619457511051814254167716639978378907772541860244086856550013092397889846722118285470864592436220124158087116627771533287055788937388878940239329499526207824711433863612560762698204961094493719383869387856238969711859264809583623302177966027446577201506617565517460558696289570673006495964627649632712253715751156691563884052608440704664968636772605318530539484460541113065632862053733886819715915370079990459245326319281229347753357504415651533538642853137997908061637144913222228910358913856225000767084942538179160202674338571634105746619568574218189594994847612652027312310093795785921672167739527534055241556231680173643224311469695449036800006809541024730610187315943996420819546667527026935040312716130485720051364766026344026115183578797978472818575958835812409946430622398307040971757829948993252918253425042316275733809645391874121130763147882897287168326084913003900627983449448901043041199976794115503237885340837033743988909742312812166015162261275068607365524396340143463860627330481053474807345895460165974675621194382910871522190628228781821709751707647150935323074723404668869475560366122349818471353443576185993414499319679234174995385260277459155020360567006153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b3b8f85be89515c5a2c7962843d38a44c635778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoriagricoli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017052bd438d0000040300473045022100d244bc9d9dc250c1d3a4857a165425808a68cde1cdb01a259213330e462b9afd022006ae8ff6bdddec87b734142a22fecbf83bda40dce774a5136747999fcf2cb292007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017052bd45560000040300463044022015417afef4f7867da0f81a5b5aa8bef100b55c073c27cded196ce44856158e5d022058060c3625dd9ab20fc5d6dcebd46dff32f1694559948845d9f8bff5bbfcb9cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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