www.roccabascerana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:34:aa:4d:58:57:9f:49:fd:b9:56:1d:3b:cc:8c:c6:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.roccabascerana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:34:aa:4d:58:57:9f:49:fd:b9:56:1d:3b:cc:8c:c6:c7
Serial Number (int): 268212509248691011302133833300952249845447
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:c1:42:db:50:97:57:bf:6c:65:1f:52:e4:15:52:2a:78:9c:55:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:df:77:0f:bf:19:c5:5a:7c:65:ef:72:f0:78:4b:68:14:35:4e:2d
Fingerprint (sha256): 27:10:04:63:a0:85:d5:d2:ad:81:27:e7:c8:97:7d:25:4d:cc:a7:a9:46:86:1e:b5:f3:3b:5f:e7:a6:62:2a:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.roccabascerana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.roccabascerana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.roccabascerana.com

Other certificates including the domain name roccabascerana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.roccabascerana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAxQ0qk1YV59J/blWHTvMjMbHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUxMTUzMThaFw0x
OTA4MjMxMTUzMThaMCExHzAdBgNVBAMTFnd3dy5yb2NjYWJhc2NlcmFuYS5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDZRi1ul5cvPzGg/d4KfEVn
7YMe4SmA6WALJypoAoYNYCpu5jzXpBTr8RM+oiykZvDCdrLxtDgPVVJhvdKHW7oI
lLt2oBTzZSOTxVY2JNSIZ9okG17xoGJh0fzdhFPMnVzln0Ns+wUCMS8okZLizgSb
D1TdPYXdLskrBPE+8GBO/A8Drmo7iP1kEFi1yFLTHE7cHFSYaNXlTZfFs0APY5ub
O0Bd2VroXgPqjy5DG6jLdbRfh0ce5WsFUTLqMC9KmEq1XKEypBZi3J9yg3aZpbgM
2PuNdE+sbU0xqBcYwJhIzXnJrVLnaV9+lt02bJy55qtRF0wSUgKeGY4h2j2lYcna
64oKYirk9iPL17/hHPMWB7S3VXxNZMah3iChpWQKuBb3tqHFqNy/OiDbkube6ttf
hVTAutvRQQ7WaN1aHc8/2OgkhrpyvAQMLxbso5LrwRUWJk81VKM8U65NpgdEsRWX
/0rlDBBfMEAyC7gucpzacCsPtHYkiQdRc9oJMmsUVVp5cN4WILcJkc5Y12kShaCt
DVT8g6Bp16LC5nLQnxZtxILI11HCt9V7JrNb7rY/svPq0kzxl80sop2qrDdXV1Mq
2fIXIw6YY5qkdXggic8NmH5/g7Z73TXKukP4httxBWbAsIHjfKwyRtv6D6mxmfho
sHxI6vZIGhfrfzHaJDkOyQIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQLwULbUJdXv2xlH1LkFVIqeJxVvjAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5yb2Nj
YWJhc2NlcmFuYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWrvDXc5AAAEAwBHMEUCIA1sMCNsoBx3sXD5cNYT/acCrX0awNr2
jlqMs2nORhTNAiEA+vHT4b2BeshjAtXIY48IZ1SzZ6qXrPWtnhaWjiq62tkAdwBj
8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWrvDXaYAAAEAwBIMEYC
IQCJ1mjQeRI7vqgXnmYaUgAJpE/h7KNU5w5wiZKrRh13VAIhAI3bG5Q2C5HuDYrR
6YmmjneJHNzyriEwPxYvXwybx6RnMA0GCSqGSIb3DQEBCwUAA4IBAQB8xZ9KXH9u
3ysBdX+z9lNIDHewrYpWEgWg5LJOsaTSm5c62ArcyxblOfozyLxx0ukZrKJsYDRZ
T2xEjL8tVbfSNPcTV4HU8VftrL+keyYgEy5E05C1L6me2BSWpLvPBQ6xc5HR6NrJ
m2/Iu6for/Pv2vsOCNAq7cdWONrLxCf9kuVZz19MxiPFi4zFDEGxU0Nr28xdfUg6
4KWBM1XAh7MBKRYGsMN+SWOQmn8rrFa5qfyTvPWdl8PSudvu0yUJuS6KLnfkcKdL
lTilJ5N40JsKsWe11yDdFto46E01L+dTrbOEueNgvi4ZCMJv3CE97aPE9nnwA6D2
h10R4WiT0tkN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2UYtbpeXLz8xoP3eCnxF
Z+2DHuEpgOlgCycqaAKGDWAqbuY816QU6/ETPqIspGbwwnay8bQ4D1VSYb3Sh1u6
CJS7dqAU82Ujk8VWNiTUiGfaJBte8aBiYdH83YRTzJ1c5Z9DbPsFAjEvKJGS4s4E
mw9U3T2F3S7JKwTxPvBgTvwPA65qO4j9ZBBYtchS0xxO3BxUmGjV5U2XxbNAD2Ob
mztAXdla6F4D6o8uQxuoy3W0X4dHHuVrBVEy6jAvSphKtVyhMqQWYtyfcoN2maW4
DNj7jXRPrG1NMagXGMCYSM15ya1S52lffpbdNmycuearURdMElICnhmOIdo9pWHJ
2uuKCmIq5PYjy9e/4RzzFge0t1V8TWTGod4goaVkCrgW97ahxajcvzog25Lm3urb
X4VUwLrb0UEO1mjdWh3PP9joJIa6crwEDC8W7KOS68EVFiZPNVSjPFOuTaYHRLEV
l/9K5QwQXzBAMgu4LnKc2nArD7R2JIkHUXPaCTJrFFVaeXDeFiC3CZHOWNdpEoWg
rQ1U/IOgadeiwuZy0J8WbcSCyNdRwrfVeyazW+62P7Lz6tJM8ZfNLKKdqqw3V1dT
KtnyFyMOmGOapHV4IInPDZh+f4O2e901yrpD+IbbcQVmwLCB43ysMkbb+g+psZn4
aLB8SOr2SBoX638x2iQ5DskCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268212509248691011302133833300952249845447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 11:53:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 11:53:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.roccabascerana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886401118596711237876093263322911549154342268338356052885915714894080173920365145472186754267598788587824823959180200727634066954431519724282947433634813686108516723941918773858640393156826426602720651128467776249639579217075338735252143993732072401372748196134022047938836973454467970071986348922257234304168541363893596984219285237024122993292042116421741573831185589920956917923768053521598895258107552475314284510725604370908979484743662914560921078309660170624620930223173013066711824456222229700435238174233448517904943995065704445906971789297915908767436738016599216141087765065860046265518786192884407948055435366651876677145400219935935783752943586185051127558226926074035601328875220752045423948904152613945403140030300898622116704620177901447049827408388332739493411159445724361027516355168741784777332976612900245146284206305301508098852602251441271072600936985831209121266980121341123746255153322685061931473715715653305145256446997720470701252010415013002933371341790537706910592315961636481049086911257109488360399613453911444507015779665088388839109914890964414713440909025708443348155077268091986261200541681640045410099802855820146840418726811412863157913518090613476706246966568410738209970399710463906237906489033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bc142db509757bf6c651f52e415522a789c55be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roccabascerana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aef0d7739000004030047304502200d6c30236ca01c77b170f970d613fda702ad7d1ac0daf68e5a8cb369ce4614cd022100faf1d3e1bd817ac86302d5c8638f086754b367aa97acf5ad9e16968e2abadad900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aef0d7698000004030048304602210089d668d079123bbea8179e661a520009a44fe1eca354e70e708992ab461d77540221008ddb1b94360b91ee0d8ad1e989a68e77891cdcf2ae21303f162f5f0c9bc7a467
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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