www.impresaedileeraldi.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:2a:ab:94:32:bf:d4:05:2e:4a:93:5b:a8:4e:ce:e8:55 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.impresaedileeraldi.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:2a:ab:94:32:bf:d4:05:2e:4a:93:5b:a8:4e:ce:e8:55
Serial Number (int): 309373389995536236630169787981560917452885
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:be:1c:04:6b:4b:d8:b5:2f:ab:38:32:1a:f7:8b:1a:70:48:89:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:5f:2f:1a:f3:3e:1e:75:4c:25:7e:09:6c:b9:cc:37:fb:17:b3:d3
Fingerprint (sha256): 2d:0f:5a:a7:32:01:92:a3:7c:ed:6b:8e:6a:31:df:4a:de:c5:be:c6:48:42:52:09:f6:30:83:ae:d9:db:75:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.impresaedileeraldi.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.impresaedileeraldi.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

impresaedileeraldi.it
www.impresaedileeraldi.it

Other certificates including the domain name impresaedileeraldi.it

(limited to 100 certificates)
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it
www.impresaedileeraldi.it

Certificate

The complete raw certificate details for www.impresaedileeraldi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309373389995536236630169787981560917452885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 10:06:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 10:06:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.impresaedileeraldi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732323944328666011036550196660575979062253709775338460144286385986157319545349113208770288347808894110090208557784321002345055430025375872099679535177828052412489715577691463632034862528375556512010543750638649988673386054172696030435831057901459641883020957335392187876936525235783516837603352925431682321853132999447444848437336641938084511044039240931734825372976070175834137202848923514470475763671765629375207882212624209015783684488929603008842460649148299910750169077691616043082730349015655881198009602719137771444722602011747585304860236711094433958153745407048307484931958889982539216495907256662304627171204283428668340528227609756689856546854893627043975568439281748878724611826780581746888649590850396040150980410309399883479608838558692004766991967269027669725556681234912962068558814631146409452231762241564926093990112281285592058320926752559925667721555589437530415186382517635268943275581710103896271488105126870005276238876270916065158154339769558889878463337249464797863345504941093840388334373782270839094295957289622672522401126305897800228129821435986533078385928881275914023270157363545997290654908681606316493529892329747681735212033441866770011195617362682181183462019319061564958338546216009637532702347237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eabe1c046b4bd8b52fab38321af78b1a70488977
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impresaedileeraldi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impresaedileeraldi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e0298e9e40000040300463044022074319017dc18c6e8f4c733b3ef75ffb7db3fc67a4962ed2121240af12bcdefa7022018095acc8494d5fa2b33d66a220424392ee893b76ca7510980de8342c997097c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0298e9db000004030046304402202535991556bb5dd1682bf0174c1f9c644bda924e3251f3c6d0759236975f6427022020b3d67e613709fd63e3a936e8c0322ab20fe2e2648ebca03b17ba0151f4af9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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