www.settimomilanese.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d6:1d:cb:ad:b0:29:55:68:21:d4:0f:70:1f:7a:5e:bd:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.settimomilanese.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:1d:cb:ad:b0:29:55:68:21:d4:0f:70:1f:7a:5e:bd:c2
Serial Number (int): 421309175419075673068077552574884489379266
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7a:f5:9f:a2:f0:a7:88:1e:4a:8b:c4:76:85:bc:f8:38:f6:7c:d7:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:87:e7:95:d5:75:87:1c:91:c5:45:2b:9e:ad:0b:9a:66:da:3e:be
Fingerprint (sha256): 2e:85:7a:e1:52:b4:a0:e1:a7:bb:ce:c4:44:75:13:44:79:ad:fb:51:4d:c1:82:e7:36:13:f6:ea:b8:2f:b8:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.settimomilanese.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.settimomilanese.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.settimomilanese.org

Other certificates including the domain name settimomilanese.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.settimomilanese.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421309175419075673068077552574884489379266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 12:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 12:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.settimomilanese.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664940666604893664321434872450938722734905071364009645581339390869746008257775702657017687019669171348178823975302316952687359278611808969467034443813261891082322744974580481167887281437486162182281585405289032250761649806017758985447691758585292393586997016297736740499357805026628377738325166683070106559627568149420413433608695687348224332552047558297564102762839317356518714821723752941995501768300030376806528329285073964797405217063094435830457491571509061087478502698079463365883694122498994264298850985656082613410598145775996302704506001878843808212378556329057874227397860972550332901224388023679353193227811411756565936148980094754549735430982467326386702688953979342454067509839854067286789105799395174171447333517475397729684551844698840993170995890881432029620646334270084070495816792699356218004136483811107202975444944985300207962183759530917434489350094035823200601573758156640683798463319272069598017458174275093250694183635503991380701400755172821840336769334559910355664483051786383045703507699357845656181803699063611728478076786533256785291303953998212024507073235231637145541042972510572931495976418775475436629162855432036757963026790185938313202571258360035871350846248366677922821141564310780710893957797939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7af59fa2f0a7881e4a8bc47685bcf838f67cd748
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.settimomilanese.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017039814a7800000403004730450220609dccc7d8d1b0ff1685fae028047584c597a9842c673a46c11dabc3e685ae68022100eae47d2b6008173f19f1e055ee752b99549fb81a900c7056c728f78e50f586d6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017039814c660000040300473045022100ecfb4ad4e9e4d634fda9a27df2e0c747bfe485bf784d6bfdb52324f617577a760220393c00fbe03c63f2c38712c8baac544afef9e09f5c5e0141d241e38bbf42e0d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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