boscaglia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:d2:c6:c5:53:0e:f0:4e:5d:d5:8b:cf:e1:57:04:47:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boscaglia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:d2:c6:c5:53:0e:f0:4e:5d:d5:8b:cf:e1:57:04:47:92
Serial Number (int): 328312371667892753718346110448799232313234
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:b7:3a:f1:83:4b:41:cf:f2:65:20:3c:03:b9:f8:19:34:7d:3b:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:89:5b:af:f9:9c:4e:54:5e:3c:93:57:b1:de:cd:60:49:ae:b6:f9
Fingerprint (sha256): 28:36:e4:32:4f:23:eb:86:6a:0b:cb:2b:86:9b:e2:6d:85:89:5c:4c:5f:71:d7:0e:8f:18:47:ee:a2:6e:34:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate boscaglia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boscaglia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boscaglia.com

Other certificates including the domain name boscaglia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for boscaglia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328312371667892753718346110448799232313234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 06:31:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 06:31:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boscaglia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742892878578404849435544447618297413959841816095846484296367354268483877602225245823522043068825607324953178858786368101549850907221656838825581991311443373141631945887716009309499835135593018924370075828930783162505338903611965211266059040897306749610881908336106937553969831120380846739714093759018354868050521385702356788238128115195554960085058088044024974891290449489286260133741093766025555567194379091797876736487750727371389100162286318150804928323908684195099862833699039423812383422740314581783749469421188397738095965382513813504953229935923800943865872728042131269220170387561340893557076651853127126600994920300442206364098618785845782131961893103661351788961851807988901255128049043191429955951307077804002410084891007043884393015085457954470457497468333701770000345185569700189896907187171195900292236460655699429485027684412313579548915079173961207470430836691645992790180910095247565726519093162067034812819875862007056560088431078111865430400208416084813067263668982874399612545072424739578953383432011422331396848533840639429991858153360816458964937512248166279882885266005487890038445249091585285949587775831061875077140684102596560845840035731273906541840749158798859462311004232178508299981755343250469583047093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68b73af1834b41cff265203c03b9f819347d3b15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscaglia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7bee16a3000004030046304402205301d32eb63a34354864c7b13fd2da3c598c4e6d64918682b7ad7803f0d6133f02203afc3d093d18ec8221edc6cfa082a25f9c218db5a41a8b522919b781d4cfa389007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7bee188300000403004630440220706ce98f03078705b4e979d7ef003711678b547ae19ec03afbff64e8026f2b56022032caa310673c60b49aca0fa91ebe6361065d0a136c484c55c934a524268d9d2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00077ba9f1d4f76fcbba718ec9e647910109bbfe8d30ae5f454977e9b06e11d6e5f40d747a38f94d2574e78749f3bd17b2e8932147b1cec2cccaa0eafeb1f5923d61115161c2ef54b6c0e1370a5f41f10f1c2fe7e4079d4a194c38a0bcf187c5d1a535807ec34729c9289acba8f45ab18e921972620c7d058ef205328240a496e4c7b83ba45f81bcb4d33ad1cfdb1968325e77382cfc2f1c4d02e78d52a4ee583cc536ced64476fe7436928f7e1d3054763a0c4400f970e906da9154cb77d732c3e430ba552b7c020b633b20fea1181f1a48a381d645db8b36f91e2177a1b0b6962abcb5ad6f10d10dec9d9b83239e01814b33de18435bd264fc1d4124de105353