centrogiovanile.com

Issued by R3

About this certificate

This digital certificate with serial number 03:71:f0:57:8e:91:5e:bd:da:00:87:fe:98:94:4e:01:fd:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=centrogiovanile.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:f0:57:8e:91:5e:bd:da:00:87:fe:98:94:4e:01:fd:2a
Serial Number (int): 300108234597781427041227960451168016137514
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:e7:eb:b9:d3:24:97:ef:40:80:61:2a:ff:76:1b:da:f6:7d:41:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:34:91:99:7e:a9:b2:b6:22:b0:a9:67:3d:bf:6d:c8:22:83:f9:4a
Fingerprint (sha256): 29:2f:4e:68:af:50:90:24:bd:5d:c9:0c:1a:e7:e2:a5:fa:89:20:5f:21:1d:37:b5:0e:1f:5c:fb:4a:06:78:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate centrogiovanile.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for centrogiovanile.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

centrogiovanile.com

Other certificates including the domain name centrogiovanile.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for centrogiovanile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300108234597781427041227960451168016137514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 17:16:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 17:16:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centrogiovanile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1034832058838124237692517499177388345238748065097773104234102892332349485068903631191392204377252845268185240866871012526018525349341073620883165821514593327420712544558549890795055309319677374330072001594520080123725510477483724788757845173402889606006180714378700406279883482947727311494628277870745001783748826679137269402573990720906705964933779860335129357946607668544601971753673522250992762659463547381963767304508597060756567275778323078839366359127354892889515632764684765243512190896223408088961320369329067101799010533080828860615252562327813513756017411747817100839042346193678111309509037499580573493298250985327799959138287489649006708334024905472255077298987317402620043947893126709379152474727505492416112401136004349803992984680458969882232061609745057852614377296641566585366779340695826933858487540265853310615345959798741480535268007187310318058765879741925121812929745514721315895553463815830706640718666738046155973865326692932830158505091670106861048721838772178193346986840899980880143220750582472112679479869984259523036396148925533878852940352486589232240942522900934417789514631662929189856334720199276121224685576808664420708570834376613666936143858493192070785725570225274404628873274071153352110479731793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4be7ebb9d32497ef4080612aff761bdaf67d41b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrogiovanile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1ace031b000004030047304502210097b26e7e845580d8f972130f448c22af55b39f19b6097c16c7d86ceded245c4a02205b79579fedae228bb874c8518a39be31b37399a9f1122db99e9e9e4acf484578007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b1ace0314000004030046304402204ab8adb5adabc01665bd053af50c11ac3a5cb900b63a9e2b13366cf7e9deed610220566950dc1835e2256f6f7c585b48aaae14107bbb21a28b5bab7214d6bc214429
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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