www.biocair.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2f:e1:82:ef:91:61:bc:92:0e:c0:cc:f1:67:25:50:17:ce was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.biocair.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:e1:82:ef:91:61:bc:92:0e:c0:cc:f1:67:25:50:17:ce
Serial Number (int): 364742171128982536819331242069293685282766
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 97:2c:5c:0a:87:94:b2:51:b8:06:9e:96:f8:ba:b4:63:67:f3:97:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:c0:9a:37:81:3c:32:14:69:27:e8:56:91:3c:42:61:1c:89:6d:47
Fingerprint (sha256): 25:e3:aa:f7:1a:f0:68:1c:74:0d:88:47:49:0f:3f:73:d9:ca:de:fd:79:36:0f:70:ff:d3:8d:66:9b:cc:19:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.biocair.it

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.biocair.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biocair.asia
biocair.be
biocair.co.uk
biocair.co.za
biocair.com
biocair.com.hk
biocair.de
biocair.dk
biocair.es
biocair.hk
biocair.in
biocair.info
biocair.it
biocair.jp
biocair.net
biocair.nl
biocair.org
biocair.xn--fiqs8s
biocairchina.com
live-biocair.kissdigital.co.uk
mail.biocair.com.hk
mail.biocair.hk
mail.live-biocair.kissdigital.co.uk
www.biocair.asia
www.biocair.be
www.biocair.co.uk
www.biocair.co.za
www.biocair.com
www.biocair.com.hk
www.biocair.de
www.biocair.dk
www.biocair.es
www.biocair.hk
www.biocair.in
www.biocair.info
www.biocair.it
www.biocair.jp
www.biocair.net
www.biocair.nl
www.biocair.org
www.biocair.xn--fiqs8s
www.biocairchina.com
www.live-biocair.kissdigital.co.uk

Other certificates including the domain name biocair.it

(limited to 100 certificates)
biocair.com
biocair.com
www.biocair.it
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
live-biocair.kissdigital.co.uk
biocair.com
biocair.com
biocair.com
biocair.de
biocair.com
biocair.co.uk
biocair.com
biocair.com

Certificate

The complete raw certificate details for www.biocair.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF2181+pDmEWYizOv30i
Ebbp/nf3akescE4z7TN+1umT5hPiqaAJmt/vNhnBI2+wv96LtIsx+BldTmWC0fdO
+Doj9pIi18MKQ25pEHz+5Q6TQzG5YMzpUIr6Y93l770QG6A4GTFcGcw2081eYowq
WmsH+uGkt5OEaaK+h4XTnSW5/OmdL8AXsVb3nMQVgF0Yy/FnCTlaXUIiBc2BEGYz
8WR3lCTpU8JaM0df5PsTCh50SaHDxi1xGYqt5tw43Zdzn8qiv7Y613DHYxgtIFtV
vkhaZGa0ysA2nPsUETUFpWyGn4QecKdF+ADoNJDk5OsKvex7aZeeoynnvPcOsMOZ
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364742171128982536819331242069293685282766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 01:39:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-01 01:39:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.biocair.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23779011824186983863299519685685104713796366965175500006579905622365179106234088263381266882962345839764827951954247816420535297677827627983556297361942864058139738631810682620069866746389013446947050543516747328491608439767950697871338494338350390204200855600475229512577182541022659709407888894541774275520177455642046078994730168778397513400039503381167211018998990183042712883199497397021183397239436878927177174525797979910196657863760406401476789747501863735599843718518573609627260259967164766736259727726205026629340840909340449838074354177813081629944475525212941699028891194415343331705983704999644851575139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							972c5c0a8794b251b8069e96f8bab46367f39790
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (741 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocair.xn--fiqs8s'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biocairchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-biocair.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.biocair.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.biocair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-biocair.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocair.xn--fiqs8s'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biocairchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-biocair.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001761c2b72f6000004030047304502205c6e936e91bfbd357c711871dc7667099a7e9328a95dacff489afb21963f6fbd022100bed14cabc87839df984a07fd89c01df24239339a17ffedecff461131e1862ad7007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001761c2b72ea000004030046304402201cec10460408ee90334597ed15dacf918283556992785f0ae75ef4b38f410c780220648cfc0613c6c51951c2d3d484c77466be34047ef548fe050b7a117c6bc61c65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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