cegliemessapica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5a:2f:7f:6b:18:35:ba:4a:dc:74:74:d3:00:83:06:8f:87 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cegliemessapica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:2f:7f:6b:18:35:ba:4a:dc:74:74:d3:00:83:06:8f:87
Serial Number (int): 379137692059564304677650469050701322817415
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:84:e3:79:99:f7:e6:95:74:fd:3e:ac:bf:34:51:1f:d2:85:a8:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:93:70:50:31:02:ef:1a:a5:79:e7:44:b7:3c:7c:ad:81:05:d2:f1
Fingerprint (sha256): 25:9c:37:3d:b6:9e:ed:df:66:a3:90:99:42:6a:e2:c2:64:ba:8e:2b:e6:d6:df:ba:7c:e9:09:9a:f6:f5:96:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cegliemessapica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cegliemessapica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cegliemessapica.org

Other certificates including the domain name cegliemessapica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cegliemessapica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISBFovf2sYNbpK3HR00wCDBo+HMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIyMjQ5MTVaFw0y
MDAzMDEyMjQ5MTVaMB4xHDAaBgNVBAMTE2NlZ2xpZW1lc3NhcGljYS5vcmcwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDZpDB13jxmyfsSKI0B3x9Mi1VH
AQ+0nLDXYW3q3KTs9hHF+aL9AzUXbtM1nH+7QC4cNkWVcTlK4aXDJ4mykskpeuT8
gSbJxgeh8YMsAyyL0B4AKovvr5bSkP5MRBO+8c4alKaP+74OT2Dj/hlpWteIyFkY
JmNe/sk1UAYY9URPWjopL6sri0Tom1qlKcCPQeh8VMKe1Fz0uLJ0xZnfuy+GyVXD
5fG9u5YrqwdYGUF02D+u/nUnmLvLxBlyZ48QBiRWG2f0HrVPFR+EZqeKcWeHmSh0
PdESqiKNB1hqcPPanD2bW7HZLC91NwVZuNpmu7U/8WJvd7Tdprs2edJM/rfwOBSm
nBWoGgtqwjARaW2NkX1gzCizcMSkyp8BBq4+35rPlCR9ozNOeFN34f1vp8Z69r55
xL20Xh+kMw0HCrzeSsBsuqCFHvUVXxccFexU35yZKqgbgBbvJ/AzV+F8MJqspuaf
RrjRa43hQBxQ5ljACwEN5Re4ySxdkg+cWgHL8vPuK0OC0lrwvXTNiFeDS3z8VAPB
qnQRgdQBvjiAp13ssBihE+8/c2dC+dD6jGhvZG53zvVijFo/5cE9DYaDW+9kJbVg
HykcS7ZCXt0Pg6xA4LnNyaWd1vcAToisht4kYct1IxO6FIe3dme0JXdyWg/LLRsg
6B4w3/VEriE3hTzy6wIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBSfhON5mffmlXT9Pqy/NFEf0oWoLTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2NlZ2xpZW1lc3Nh
cGljYS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ
XgAAAW7JBKVfAAAEAwBHMEUCIFIvU5lLcqKrGpB0PJ0hF0JneR4qD3VGD+Eez6Tq
yWm8AiEAz4y0pIzvdQpODdxUGpda6WBSf9sd5oHrwHPkgUFNyBcAdgBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW7JBKWRAAAEAwBHMEUCIQC/ptBk
+7IW5cpjLu8qdIGGcyq0cz4vz7yvyNxAKVI/qwIgCjqc+6ZIeDwuVgtFjHUGAUIu
H/KcZ6KxM190aQ0xYbcwDQYJKoZIhvcNAQELBQADggEBAIFe9KqjnmXgkeAdJx7B
COIfFUbhPv912XL/gudH1pEKqGodft/8zl9Qmm+ovLFYjt6CXf7NeIdwj+AvAZRR
qSR8QCdDW6t5tLnGTJ/EJ5xGKt3T4llVLPX4cwmHDt0CvZW1G/b8ljDmQoIi2X2n
WcCVYxg8rqzfQ1OQlaR6s/bBYKe5LRpfY5plGS+Xe5FjAqtH5yvasCwaJmVNuBxM
e2Tt3qcBKkLtwTjZwCT6oyEta9UfPdyq1Yw/zFZ+F8RXomwdzu5kbJWmhyEWyob8
STKmrrjXENNv8/8jFZK61/7Wo82nZ+neNKmZ5m2Ne+YzRRFKfBfAqpHYsFx1XIIU
1hA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379137692059564304677650469050701322817415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:49:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:49:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cegliemessapica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887899301423486032870683961999324660286680439506437590464335112693020128697794907381131324962321627477572620858057854041043413054462125817760922971958513839513961265354502207449087539509404595868320678688729173559862848318148116958167806565390593463437345637143497043215641080119722751956190929960028015841142007545881785811686286763235113389206973535219532467431536712344601787172788358088829303482643150379557500342892464699848296291885828017997348910001525827869786052038036968738477824137556791233816424858641337826156983896088764814253488430175297435124910847473178081382889451859948220233021896250031496064401037412310124139291913379755550189737657648357336832054061023261707489252906100164501888431809879230784768863885070686025317742685757734797198348967304483005379251755375950630262893555350487094189735303489473101466868323195187989154972520335275769232969681429751991960205843989834790604732535541896180628552026702482990800221329294476498863196390744685374517258284305735810363530989946113875842900162857551984908699492826407853018044044982441710190827542555098568516000404637708594582830790440375493248160959391501351809033486634606123733550595374949131525311926503150302581557401679486562123165573775965645931340952299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f84e37999f7e69574fd3eacbf34511fd285a82d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cegliemessapica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec904a55f00000403004730450220522f53994b72a2ab1a90743c9d21174267791e2a0f75460fe11ecfa4eac969bc022100cf8cb4a48cef750a4e0ddc541a975ae960527fdb1de681ebc073e481414dc8170076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec904a5910000040300473045022100bfa6d064fbb216e5ca632eef2a748186732ab4733e2fcfbcafc8dc4029523fab02200a3a9cfba648783c2e560b458c750601422e1ff29c67a2b1335f74690d3161b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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