www.santangelolodigiano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:65:cd:89:4c:ea:c9:b0:a5:ed:8a:98:18:26:2c:68:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.santangelolodigiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:65:cd:89:4c:ea:c9:b0:a5:ed:8a:98:18:26:2c:68:d9
Serial Number (int): 341778815621836612832003444568542466042073
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:04:37:7e:e5:46:a4:7f:7b:00:d2:f5:c4:52:32:57:9a:27:5d:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:d4:86:d6:57:e3:88:85:d5:0c:c5:65:c4:b3:ee:ec:c8:b1:8b:00
Fingerprint (sha256): 2c:14:ca:44:4a:e7:2c:0f:af:1d:ba:e1:44:93:cc:b4:35:de:4a:46:b1:19:f9:1e:62:8d:51:3c:7c:b4:7e:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.santangelolodigiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.santangelolodigiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.santangelolodigiano.org

Other certificates including the domain name santangelolodigiano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.santangelolodigiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISA+xlzYlM6smwpe2KmBgmLGjZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzM0MjVaFw0x
OTA4MjYxNzM0MjVaMCYxJDAiBgNVBAMTG3d3dy5zYW50YW5nZWxvbG9kaWdpYW5v
Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMf2jKxAEkEwNAZM
11y+B8JDSSiPZWkHuImNqyaYNPJ9c5tFzDtk3Qph2tPMBemvarBM7QSx8VyrC8WL
TZpnz2tEjyzAD/XaY69bH3wcd2ktSMZcPXziopHVih3yu3oz+koPGHVz8yK1/GJV
A6s5hYHHzEllTHbSOpTyFIxKeLvwOK5VsxuZC0p9gFUZRHbP7/V0r4pdubCsLP5U
GEZUuxKeRag8+HGhZUvEGtLHj32wsUs2+TWb8DIdia38+tYUP+1Tw96DRaEo8p5D
85QIls+C9ScrbdMpikQKOlT8i+xI8TkhyejWz12q3qKp+bOp8x5rF0m+u4DHl6Jr
+UrT5d37UGnQACwUNZZlP7eZhFwaT8qERkbnA8DuyUS5CMo2uRxAimuc4Ee9Aato
lrmTPK/dC2N8TFt6cd5HFs7wYiqlwQUSTpJsZhAyv9lebHVELg9twmFl9kXuFUqH
W6C7gVvBLN26IkWPojOgxVqiBILNvvb6B1ULzSGgrzfUt4bKpnAXunVXSn9J4yNy
E1FwdEXRzNOx9Ucfm9t3fdY5JffmfUEVCKoY0yG7rCrkzXZjrMxJwB4l8/vt/jca
OLrfqlXsFciVz0RwF8qtYHn7cxJLpTzwHajtqtjV1rh5HSzDIAvwyDuMFBdLVPYz
dSGp+B0b7hachDuJ4L/plDAj0ipLAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFAYEN37lRqR/ewDS9cRSMleaJ12pMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3
LnNhbnRhbmdlbG9sb2RpZ2lhbm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD
1D7n/nSI+6SPKJMBnd3x2/4AAAFq/7jXqgAABAMARzBFAiEAj1O43P+xk4C8TF4a
i4CtWqSWr6y71PJ9OWoewigJ2cwCIGxudS4TqHWmOwfu9oEpa3OsuI0Y/+jwDpsX
0deKCyxuAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFq/7jX
mgAABAMASDBGAiEA6vTTLq6Le4kppJ76BJtCsE+JOJF4EzHWbEg4ThsGB3kCIQCO
f4TvPZ16lQI9lmmwhjvwpBEuRgk3HsCnguBz5sxHlDANBgkqhkiG9w0BAQsFAAOC
AQEADRPg7Z4YzOeQOOd0JsKtr6VPCxyurIU/CqI6ujkutwHDk/LppgIpbvbk5cFw
5FpWCkoLfitsWUsrSQdq4mVb6l7ob06p7/x2RrDYpF29ZncKHmMohZQlSxOcTQt2
n6WDJ8Rl5HKL2VVOGxYz9hTQMbW83guqDC+qgQdScuCUxNjkyryXvr7WLUyDyGBL
T0cqtwDyVRVPZA6nZbMwE0mbmnzqcD3J6+bQ817RW0xNwScDhcxkJJy6Kkg0QTth
B+tvaMOuTUZTzwGrCe+yjlA+a2gCOSynHx32KYie5s5tMtm6y//CQGagLLUucA2f
MpwGpUHv/t3OA/3Hb4wOrBbr0A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341778815621836612832003444568542466042073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:34:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:34:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santangelolodigiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815778209452943788908681035235780438561068196798286972201663250484081323073924021065575803418278242237768883269883809371279088649823670670588706261797965154723840773472880150020477069261500904655134880844499749965871665467015388204588074661874586673618466266696295226595512361527766453179652449222160579125228030036873640870123060572409625663213928438845222789213277206788309691564691711525118624748775304181807081119457163793908454300839085264963797529339157599297071359486133374205594971382716483576227746167895628461849049321468047093555615575469369864530485779338131735831659439985877682255073428513853214712569760771516754107242872536035466404999985959731970210847631723369694414779520937519026777268263507564940267749297972632208711119393685472505392171009417438076173141603553896217168187670701030892531479460891818492234347367458110195375371029805821152959056063740587746776141127938195433641610687489515232009952473031602855034623020936967975450619173278251216125620638860480492735233830767546530769086907462377484461167485820540951798039979325543925447324700507811882756561618188444871976261221302500242684297848498883791341899508066038757797977552438786647677867121095465581448189984837348550040910185657779361044422077003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0604377ee546a47f7b00d2f5c45232579a275da9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santangelolodigiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016affb8d7aa00000403004730450221008f53b8dcffb19380bc4c5e1a8b80ad5aa496afacbbd4f27d396a1ec22809d9cc02206c6e752e13a875a63b07eef681296b73acb88d18ffe8f00e9b17d1d78a0b2c6e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016affb8d79a0000040300483046022100eaf4d32eae8b7b8929a49efa049b42b04f893891781331d66c48384e1b0607790221008e7f84ef3d9d7a95023d9669b0863bf0a4112e4609371ec0a782e073e6cc4794
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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