www.pescantina.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:09:ab:3c:80:d3:2d:8e:b1:c5:ef:d6:70:60:f4:0c:fb:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pescantina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:ab:3c:80:d3:2d:8e:b1:c5:ef:d6:70:60:f4:0c:fb:85
Serial Number (int): 351739297167299836351932325791655395130245
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:b1:0f:78:5c:09:8b:79:10:b6:90:7b:b9:af:7e:f1:de:8b:07:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:1d:f4:0c:ec:6e:bc:39:a4:00:4c:c2:6e:1f:8d:6b:28:ef:f4:0b
Fingerprint (sha256): 25:8b:2a:d8:8f:83:45:48:b3:b5:c7:9d:9c:c1:b1:a0:de:bd:b9:8f:c2:74:0e:10:d7:f9:6d:78:ab:ad:5f:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pescantina.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pescantina.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pescantina.org

Other certificates including the domain name pescantina.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pescantina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351739297167299836351932325791655395130245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 16:52:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 16:52:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pescantina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794853315502155100999633108682889882942787831099204642389345514098490780934626835593553378211761694976603590290284346164088008181857974585881052804375952852294707295920124484365004691239382395868995040153413456816511964734885905653870497658083544925247537608051175116350499539883681908857014477171202278675269077340977598601462025710237523393134000736114387132250807109278138024126535367259369666334192515121107795977056836715957477155870765002925079204966967419754232811131622259445628196398264371298853705714629432297646189341849439991354432695732431401425302184076503276362508060961946941094729947282342947567812255830290668155425768632448933526609044659912636052947333433904544521891233413406303040096428198433656140287308999172622877094940742376022293242010136115379055165151538977260142372724618922321166831443318533270256279294147732071449396418702659715280974799152742717769245347659818760928399134312748819999684563823753067260979713391104231259783358708795701291943157509673340379005097629118021011919088526818784601002233595225664698378813765498387044781640393321313054096070614207207766563483464057567525087482803296406104577164013020563197929621747634540803348119293261974019575957653857580120786230972549394058515866261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1b10f785c098b7910b6907bb9af7ef1de8b0740
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pescantina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec7bdee7a000004030046304402200a5cec27222d86b395ca58ce7714664644e717d8edb4ba86d9f6ecfd14f41f080220038ce59e4f39a1ae4a10d834930a1ddf8af40fe1f0e8e2cfd5197847adff681d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec7bdee700000040300483046022100a44218679fe3322e6576643171a6b717af5e1ce6d4a913f218956b5d0f887cce022100ffefc25666f7fe635afc429adb6329f7493e4ee38c3738596b3a9715d44f877a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef134194d273fdc55cfeac2f8196ecf426d98c0d8add3e880b0e2a9e5f0c4d2bd2425a91247fdf917e445969be4750be648ea5f10353c1f7f6f63924cb360f038694cfcb861fbe2db4185628920d80275af3331784c723c1c49e8f1f5530e532970e240c41dca0754060d4b17e50998393f13c9fa07b61c1905c01adae7a17c9625ddda964ccb4b9ecf23579266a707cae660a4462930232b709ec7e220213f34942876e4e3e3b689b65371784c71e7e4aff63534e0ed624fba8a599ca2ae831163404d553037366f3d8d40ff35046ca6b27a31e4814686816df987b7d1ba9be4f0db9f39997e2825cee59efa0a31c2ca133e68c7181436db24d73e0e926f24