www.tecnodesignroma.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:6c:3e:3f:c8:49:b9:b7:66:fb:92:dd:aa:14:f9:e9:79 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tecnodesignroma.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:6c:3e:3f:c8:49:b9:b7:66:fb:92:dd:aa:14:f9:e9:79
Serial Number (int): 322391281313738979429396786470803169995129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:3d:b9:54:b9:f9:51:ee:27:68:ca:f7:d5:07:7c:57:06:32:0f:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:02:59:25:71:99:32:50:9f:3b:f4:e3:16:d1:9b:38:d7:5d:01:d6
Fingerprint (sha256): 25:f3:5d:c7:ae:4b:72:18:b8:91:32:3e:04:cd:b1:3d:ca:af:dd:81:d7:85:9f:2d:c0:be:c1:e8:83:3c:9a:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tecnodesignroma.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnodesignroma.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tecnodesignroma.it
www.tecnodesignroma.it

Other certificates including the domain name tecnodesignroma.it

(limited to 100 certificates)
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it

Certificate

The complete raw certificate details for www.tecnodesignroma.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322391281313738979429396786470803169995129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 09:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 09:07:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnodesignroma.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 568120988088181355468316280741568701187231839462746448810961369195295279352240822738285637853574243976425308214978193106067629066187429392893691816121342474436032865595054896373870269023242878628948406309912378332278435933857509901203861463613098828485876881652875801344589838080347607831638054072878477714532582657010999443170024850479747994058812923715485550678012721126622628167445903482550189086954655635843174721938337896001637545712118390842892803665208342068096956454031106790213804021777610296993573060838025923960605550222333734272349047609857472192764113163407788816561673289556380244337032602695052733611671995674011440843028175669574573860495957383105969321476621135060102300988599782907469235989179186973161253267734406983005439257086875919679382857776137381328188148238834974934662288682350530892010940380064226823309405736720925052879514072793646719587958291011716833325138309909269181070184677749088938139303713507311526076206626999041543592946508807473842326670803011068377330241599986177668239629478851167218970299777857072741431395126365095480769626580216209399195178221904857685654404941747418828975521891993773244473252181473781207212093347719449352056198887149718216032651198273163394977016894744219021284785041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f3db954b9f951ee2768caf7d5077c5706320f87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnodesignroma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnodesignroma.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e73ae4073000004030046304402201492f532edb29ac52c2fc449695be1c4de2cd9d227726cfceb0a436d0b72deba0220629e796d319c4fafef0c999ab94419660ff25eefd66fae68f402313a5b76706300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e73ae40a00000040300473045022100cb4a8f457ce2bc96d91f5398662e10af2877b63266815d3c0580d406fb455a9d0220195607ecc2072dfdc416e4491d2df7dc112e0fdc133996472e0866808538b467
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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