www.lavoroagricolo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:49:eb:7c:c1:dd:2b:4f:a5:b9:15:bd:22:bc:86:c1:9b:65 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lavoroagricolo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:eb:7c:c1:dd:2b:4f:a5:b9:15:bd:22:bc:86:c1:9b:65
Serial Number (int): 373602772868117289531671838390579342973797
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:de:65:79:aa:6f:dd:7a:9d:d0:b8:cb:53:4c:ab:75:31:82:01:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:3e:37:ee:14:1e:07:5e:1f:56:ff:c4:54:ea:66:58:9c:6c:61:a6
Fingerprint (sha256): 2d:5c:fc:7e:9a:85:19:c2:68:74:41:9f:65:b3:59:23:20:13:d8:ab:97:8b:ae:60:10:e9:72:52:02:c8:3d:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lavoroagricolo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lavoroagricolo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lavoroagricolo.com

Other certificates including the domain name lavoroagricolo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lavoroagricolo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISBEnrfMHdK0+luRW9IryGwZtlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMxOTU0MTVaFw0y
MDA0MTIxOTU0MTVaMCExHzAdBgNVBAMTFnd3dy5sYXZvcm9hZ3JpY29sby5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCn8pqTVpn8RiiD2pC8BmkC
CpKm/zHXEEIKuWtiPpj/H07913ZhWEPMt4TENgWQaZTigqP7//NtKXpoG1HICNil
sHzS05mJfK0/sQ1LTk6YZNme+yueuGjgHBfx8msSAKc8wviEr+rX2GYhqJCO023W
OZJUXdwU6hFWNeFLr448ZE/GHnPXMt6lizsoo3TTQ0JA/QzVIHNySi99kAsWMXRF
rG87yz72WpFRQDgD1nSXpyO6i4Yc+IfFCM3EiQ81DECNtfb9Zl6u+JYhEtsiY4wH
Q3HRvIq3kqoew9x5PYKVbNkgEN48m9Ismli5jtyEyjCiF0JLIwjRTvNQ4YLCuXh9
DwnpWdR+bOf22u4kp2+VrUSc7ebFBtlNzaVOIvcqbvrfb1w9NOwXt8wPBvS1jCWd
6uzGQyQI2/F9aJsLPrNlQ7UBa3e/Ax2kRbp9npIb1YkM5FbjSnYAt2eixrThTdjh
MMbfMOPkpguA6UJobUFGPqn4joZaiQWrUZX6V4xEjS4t/kQKq78YxOsGq+BFRfjC
Hyhx6miu9IxcBw5P7o6nh7oAdYnJj7X680Un7dswghNrX82xzr2AjvKQNhOyaYbO
fA2aQbdq2z/eGjH7t/qIdsFIEyTTJqTGAAv/XU0HCa3MbCpEPiLaebmTDihTkzMO
EBmKKQ1FcQEoQWLefZA5WQIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTh3mV5qm/dep3QuMtTTKt1MYIBWTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5sYXZv
cm9hZ3JpY29sby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKE
GHWWgXFFWAAAAW+gr4WOAAAEAwBIMEYCIQC5k/Ycz1vJv/zE8Vfucd9OdUOTV3Vi
Hx836q2MsgXksAIhAMhAyOj8ZtfHCiaZ0mWdHMvtJhKuVsu3pkhjcsD+F0U2AHYA
B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvoK+FsgAABAMARzBF
AiEAmXw7rA5SD8+4MHe3WdBSbXhZTGeH25KsF1ecfF9vOQECID08oHR7tRCUhyKO
LdC/VgACD5hxGkq12UYqnuid+TIWMA0GCSqGSIb3DQEBCwUAA4IBAQBuGSv9C6iL
QFknduiIrp4fnztmzk+QOfGarmZkYohhqp4LZV2dKgUhq6jJR+6cVQvysMfvH3m4
YwWEi/tAG+u3Dg1KqE+b+Ap9YXMBfYqevIbvqTf/fCIhZjO8kXO0edUw56VYXqUF
bkBHoEFT/VAO721Ph7yFIiQ5FvBHqCM7HrNYazlzf6bCiDW2KDnN4+BMmQlEEsFF
kmdvML3OLxSQc30DbaATpquKVQdTJ/oIMKPlM/mnmWbxR7TKc+ZUHe+vlHfLupaK
8Vt7OaVXAwAstDKMXmiTjojsK7O5CPd7kfWssEEBrzwp+JZ8fXHEnx/MI/KRz84I
4XaWn1JnEIiu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373602772868117289531671838390579342973797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 19:54:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 19:54:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lavoroagricolo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685166720285990172916143863029208850028703213752444520535086930174835739128638465082039220611918898805902283115306238821297974311454789266604739075112453571306724481406261159136796826961489908732416339406159630278552421731452794318441775280513908990908165885686539610695293560525281344229941674067859061128289573353055129493978186740677628036132223855260881466383946534379634402234717461701416846758186406502618215872798406207386127400011167717752058066483765221443924188997123175739232604526704042901948174593911938040412742938517236867377768625114556844500232148635396728436038604015252563169725591937688634947746080113475551868532716887271510669919082034295936882569499361681926288209012597067158869587237229062361513782175907899419803786526937644771884240036508933083984011917635324576628817160933616023926877171792257004075590884723411020440548375448349857722569664064015080137631956655327076383037171279359397122774321711737783366580871128470252267453178220593322623130845013992659683667031448648166974779232500234189415187389014964447379984083572723809455490761619803532855970431360485139606097543279645659474126739733128789669945733450934583317988165220250664970718426523646974320933167306613524567730021636448206841608943961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1de6579aa6fdd7a9dd0b8cb534cab7531820159
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoroagricolo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fa0af858e0000040300483046022100b993f61ccf5bc9bffcc4f157ee71df4e7543935775621f1f37eaad8cb205e4b0022100c840c8e8fc66d7c70a2699d2659d1ccbed2612ae56cbb7a6486372c0fe17453600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa0af85b20000040300473045022100997c3bac0e520fcfb83077b759d0526d78594c6787db92ac17579c7c5f6f390102203d3ca0747bb5109487228e2dd0bf5600020f98711a4ab5d9462a9ee89df93216
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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