www.municipali.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:82:08:ed:9b:9b:63:71:dd:3c:bb:77:62:f9:c5:6e:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.municipali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:82:08:ed:9b:9b:63:71:dd:3c:bb:77:62:f9:c5:6e:fc
Serial Number (int): 335010695047289887043102969238395124281084
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:01:2a:70:af:81:29:7a:56:45:d5:f6:e2:5c:ee:60:31:82:1c:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:98:61:e4:8e:3c:63:3f:82:4e:e3:88:4f:03:0e:4e:fd:23:72:f9
Fingerprint (sha256): 2a:84:0a:d0:cf:80:12:aa:a6:1a:26:63:e1:ae:c4:a1:78:2f:f2:ca:8d:8e:47:34:85:4b:b6:62:5d:fa:2b:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.municipali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.municipali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.municipali.com

Other certificates including the domain name municipali.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.municipali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335010695047289887043102969238395124281084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 20:54:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 20:54:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.municipali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717415407657030532964205623467955217177755793592154265770003468914140552826503802442522548625668233598796481460736445717435546968393887883337744999204961956033733779697085661728341838769990520244344999447796482729545856637187682665307108564652445832826201443040060034347260705492860881273215905429215999892452613107309899601092851022696713598930526782362148611464076701577909417998446113373898950743823370644275446760127159916231365943609247617392391130930349818726293052436548603630336290967616476461424735630462007963746410645783478870447017713238593637013356389287835554237412437380236918998830178528881274442657448894312544524651755422670114927970517988849386959324500146609281354276716767932207713393738223455668848518805788231734736888535010492945385855996715901697954580041135647028377966428111655657442483493131790580891060553611134116947428440501086211731756953175994019897188207272425165284429618548364535704843609149216335922553455959053465134035898297340474343294977831309208532934706575526843065083988522654559825331909668783204089227617583319813422389669048855936878856713031956042005500502225053831839984651470238282395839425474246614885374642969356727842173836143903630829735139737819986437317583548158371750498205831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46012a70af81297a5645d5f6e25cee6031821cde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.municipali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb401dcb0000004030046304402204d4661667ba23699f3944fd699a0fafea842b87ed521316134b94a85734dd1930220096f061ae28c956e5315b1331086787aa3fb6debf1ec2fe19418f3b46bc7b6ba0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eb401dd05000004030046304402200716213407477400e07b1dc495d7c1cf56a46b10f482c37e09fdb29b471829ec02207b09aa84ed644a450419bab0e13aa0fc07b2029bf529a26a10536bdf87bb6b76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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