www.gioiatauro.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b1:25:fb:66:e3:29:bd:00:11:18:6f:97:5c:ad:f8:1f:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gioiatauro.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b1:25:fb:66:e3:29:bd:00:11:18:6f:97:5c:ad:f8:1f:b9
Serial Number (int): 408729609461206118584451431172105171378105
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:33:67:ec:a6:c6:72:ae:06:4f:fb:53:fb:12:b0:69:49:7d:05:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:ad:28:eb:ff:e5:a5:56:95:fc:e2:63:9f:59:0d:e5:4b:2f:bb:64
Fingerprint (sha256): 29:6e:cf:b3:38:06:28:48:d3:e4:b3:8f:50:cb:61:1f:7f:6b:4e:0c:88:28:cc:69:a8:5a:c9:df:01:99:84:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gioiatauro.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gioiatauro.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gioiatauro.org

Other certificates including the domain name gioiatauro.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gioiatauro.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzaRWG7OWQhvCvmAc8dxk
h272Umo8AnrS+he0zDQVNr3jvQzkEOC/eWT1hOJ7Pv40O5eCJgnOA3rWzBuB4SNm
kQcvSIvqSRnl5SqHLh9zW1uDlU7Rww5gquTAvlTQeRPFFrUwxeN5mSpkb5Bph6V3
93eaULH+2bB2m//fYb66pcLJI2CwzvZER0nL+sTb5FuCgi9hwSvxHhwwVSuyEhcH
qvrFiQIhZA+KgpVm572DhENcwkykrK+SV5UlznFshlN79EZTk6wB90z7v0Z8CXhZ
9wiCxg+GD6o43R+oKBxVoPRxdCaouBAWuyfoPBnxtHiBTb7DY5zFizUT1W6HFAzu
liG1ud/rK08L0cqorRfwuPUFOwb/RKX/W40W6SiBN7su0ihDTlAHRp5G4oDk8fJq
SQlyYr3tzHFKUzP6+qeMktxvuJbLcyrQjbU2iYx/kEczK5Ifk/+gy4BGzm9ntody
PybbLaePz2ZekATPkTwbxgVbV9fbe7lKZdxux9KekvDip/GK7MykZVrNj49MTBk0
DVbRRHrEUgGlx25dHe6nGRoU4UW0cbOWuX2fZgv69UpT6iBLysl9DcqJrcyvPfJv
N6fVpGZe99swN4HmSNWpQPt3Ef9JGS0Vrd4AUOiKI5rR5uOE6bJjUiVJTryd2CTi
nSG9m9ZMfyax/hMZhZHD5fsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408729609461206118584451431172105171378105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 03:39:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 03:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gioiatauro.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838945916198092268516951854036066892686579491720557484496800341973343100715753275455215044410220859274530571864926718956063140855047883619333720023789257802067847185047155547920101964271056399195802543592050600348683244220756799965360180460930513169900635548464643072088595924834148324281569268185762787821264030672327161077080712283846430693908512051545164987118324609853070532585598952917949309118990390748975013030002243072821869754404887117591118605391999126506395046482614774857695597307588740642856489942161261817745950289143171474626835637624212477620069056990308981948426359830525405904877443191840187745193808011613429533437092898124056225920745156835597835914629529592507997892433368662639463426784702521029714722419740353107642839122869728858510666867404711562835590582527888469887752482058132020035256338299485883568649405112916362531700632770015903243314611278441159870888984405355731249747544214621699455899030965951902002894462592104504818349958648518130282365695801072808939633437742792754005904908524812544613120981942872704711421826420641407947568610081364012357447011612752361562372977968311443371668864610872271712605351938437435999878796549419799445774510849944808408636740067490168681390750162458399647555905019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f43367eca6c672ae064ffb53fb12b069497d0582
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gioiatauro.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000171437c990a0000040300473045022100d689de1980573a3c2dd0c82bcad9ddb0a29120744cccca19639c8a1d758f6716022078630e54c171d4f65a42419e4a72987a48567e730b86248159d503f6b0de6e9000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171437c992f00000403004730450220455a0e819a5d7c51ff812d58496153b3415b4e66436631eb5b8389b9c374b9ab022100b5939de735f9668ad91fda8df2ad1c164276e2fad5a71967660df77f1cc6b247
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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