www.boscaglia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:17:30:c0:0a:fa:7a:1a:57:03:6c:bf:df:db:4e:75:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.boscaglia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:17:30:c0:0a:fa:7a:1a:57:03:6c:bf:df:db:4e:75:b4
Serial Number (int): 337250650987894724421062529088912026924468
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:17:f6:94:f2:bb:1e:ba:f3:97:cc:bf:59:e4:d4:f6:cc:2b:e8:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:eb:b5:6d:c4:ee:de:fa:c5:e2:d4:ec:26:e9:29:e1:6b:0f:f7:2a
Fingerprint (sha256): 2f:2c:07:fa:b7:8a:ba:dc:46:3c:19:4e:fd:79:56:1e:5c:d1:32:88:73:83:89:b0:f0:eb:60:fd:e7:54:3c:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.boscaglia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.boscaglia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.boscaglia.com

Other certificates including the domain name boscaglia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.boscaglia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyi3UZnVII3YljBFLpG+q
VAIwCakKo1GMyScIAonvSINOWJGj1QzzvW1rQBX7ivz6H99TMWmg/sENVfkc7Ov2
tHY4nhBqbzTmVSGO8G0d0eTtNNvwyNf6pJ9G3s1zsRC5fZvcazH9lM03DR4mNPB3
p5ECaWb8v/kGe7XjTJIBkJMKTwoLWCKNbSd4SOo4OB18kStZa7XZRiowAzeArYYo
hCdimT53h0NFy75iEGJeQGQFlzassXlZTu4lNWulKhHsFQCo6QooANjNSS6KZ5gd
KnxJGSxze1oOGMC7iie4vavkhoZQMyXad3A6MjOcPQy1KJtlds1b/vRVLAhKhQbv
XHbxYsgdQtxGG/mKP8uoNgOxZXvJQIq0bya2iKVR++LUiv4lckvxt0Ycl6QtE4Yn
KKnlnD7HufgrE3X0z9JlAcMeEM34HHOFsG/IQ5yipDlf+SzTYV/TriiRaBtUokoi
75vS9sBeEh5hKwGsK/D1sXWvJcu+vTDv5e6zUnPMcMuMIhGGLXzBy+/x8EB/PMPA
8HeXv8keKaGx2NYJ7LENeWQWX0hEfFIOjoHWfPDPgXOqLS5ahNPDrcticz2eDugL
qK5/s6Sn1mO09vgGjuq/r94147YG71fCfT0VTtL7Rwto0pZiXjKjo7tZS2Xk6f2p
wSufH4OSeVRRZDuxw8kAO4cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337250650987894724421062529088912026924468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:46:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:46:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.boscaglia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824818448679000543722613884716323621638599023984213918368964468233271486638257251273555208903008314033357615037044204495830482247574553342774782246753271660229982787031240033110191264732080985290836230901498193041280343070313526121211402786304876968680701246636613092533783751117343318961794820635268448512549901652686567379851162050658521977531083398690347192480428205374874182475595076435432111054936080093324860802606561344038162576255415532129271564306577666389182883479585170832703343893780806129271877986166862923406753282363528051442136028348809809806886124497974092031176798379130083757582836471157744177874818736287632450673531647092064170395646246710315913569585986202581115990559251654281115059950583616760442202102127561508564613978341520075689467433814973680006369668290183432395317393245000218056930166220998329330986212442205110264305119599976500666210990508764131506840957865220813505259812811946871265115280674770263010683585749388976915311195773277995984711603708689670435964646792261007506320895895267904897034025396709736634876658221591522639118365698268379109294435096104034981897851905827608469893650972353732592339478513716784386224831489879166358005065765948269855635442281158837141692290844408418883357129607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a617f694f2bb1ebaf397ccbf59e4d4f6cc2be833
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscaglia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700c600fba0000040300463044022022133bd44ef630aac273b0aec961a14ba7fb4822863a3321fa67028af191f06e02200235d37877c4aebd257734b86cc4abada9b228a4611ab1cedfca15c1fbae6c6c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700c600fa80000040300463044022043b9393971c9fa109f44941618d1b8b31400a50e42d667fd655923d50986cca702201fd8c6b074caff0b3a6ede4a7d7774006536513e87272b4d4c8a674bf4c12881
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003cd5c733560ca2f2f4d820ed087a0ec0bff621b2eea181df31ff578c6c1b50125d3f8ccb31e40f25a25b350ca827c53406784360465bba549c30e1531b5e220d937d9956e049edef5605026f69043f0492c60f94b584ec6925ce01f55ca4679d2bce3be6f30beae41cce014e5502dbe09815d66d063b4587d0baa4897d113e691fe82ee08fc99d9b276926283e4752f19cf7d3139ecfb59f9ff64d76137fe0ebc3359db75ce15db79e340eb8013f6c9e1bee5a00582963fca6e58f8a265295a7e421b7759f2633f390272271fa31f6eb060ece31629f22ab04f1b979faf762a151cf862c566df03ce83587e4664d37ac3d4392aed35585bd57034d21f5ee5ee