www.casalpusterlengo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:44:af:ae:41:83:66:7f:cc:3d:42:52:71:f4:b2:83:a2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.casalpusterlengo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:44:af:ae:41:83:66:7f:cc:3d:42:52:71:f4:b2:83:a2
Serial Number (int): 307025994652679879967202473523708307866530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:92:90:31:a1:17:34:b4:db:a3:7d:1a:82:36:4f:22:b5:ef:cd:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:dc:82:ae:05:ea:5b:19:f3:53:3a:c8:77:cb:3f:2f:e7:f6:c9:2c
Fingerprint (sha256): 2f:53:84:bb:73:81:cb:24:dc:40:48:a4:f4:98:12:d1:d3:1f:91:3e:15:a1:ce:6f:55:8f:6d:a4:52:3a:23:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.casalpusterlengo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casalpusterlengo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.casalpusterlengo.org

Other certificates including the domain name casalpusterlengo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.casalpusterlengo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISA4ZEr65Bg2Z/zD1CUnH0soOiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzM0MDBaFw0x
OTA4MjYxNzM0MDBaMCMxITAfBgNVBAMTGHd3dy5jYXNhbHB1c3RlcmxlbmdvLm9y
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMQAvzUUnVMfhHFSM5q4
jR/hN62uuVLGEbQmngaMiY3JNYXCMz09LU6k4Cy+6WTwhaFQkjVtWj6C1ejSJ6AE
1E0YYoGQXXyYy/aQ5orTaaPuNrlqF6f9A0aS0n1zhpUHiTIq4N8uaSRtA5qeRmsU
AW8gt1xmkh9iYZXoczz/M9uKEHI/NlA6ewrUr9d6bXyWsSxp2aYChYMZ3csdHcc1
/EIVZoTQgcrLQOO16mG6fEXnDLTf/R+q8hFj6zqp+jkHBCvcRzm1FFk0cBHjuZfA
DZkzWS1Irm4oSL7aZeGz0E0kadUm6sMmHR4nSGmGu+AYR1dRu1I10zKeQI7IKBje
M3q0JauEUNEMQTi+QQbMrjcjp9LnrezWd5PECZy9MInFXZYzcCB9p7Vc4bAS2qyq
206XO1S1O030zgBzb9ieJNkwJQQXtg8xF0ZJ4OkCo1zf9SIBsRS5DHIdfn0Sllmn
BMseof+XW4OJB/OJxPMjMhgKb2bHznhAszohAaJ9yrBp5QhcHtICEiMFa/SkatIS
G/lM/I55Fd/2NJ0Uw473jH5gFlExGd0vfA6/izbo7zbv2fVoeGMNu/CPTUa/DKtX
LsY3SL4O+kvSCEg+W/JmGFOGQUKMFc3A9IxZpdnEuSWtjAk6lb7c2w4S65m+Ylb9
lOOg2UuNKXelEnblkkqx0E+bAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFH6SkDGhFzS026N9GoI2TyK1781ZMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LmNh
c2FscHVzdGVybGVuZ28ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5C
IAjGNzV55hB7zFYAAAFq/7h3swAABAMARjBEAiAhTSKnPMdBevO/JeahiR1L26YH
p/ifGM8TQ9GN5NfnFAIgQEMTURz+eUUH8H1m9m/tL68BtZW/lWo+mwZ01oMtizAA
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWr/uHlKAAAEAwBH
MEUCIQDV8GwX1PafPwQWRvpuj3Bi08lVhESF6iK+T+s/qyfNkQIgW4Cgs2esdREI
ZMomwaFAiYt1jo2tYrXbunc68S/AlR0wDQYJKoZIhvcNAQELBQADggEBAFOd8w2N
Ze/Z5qylI3rSOc68b7i0QW6fEH6oKeFNFHsBs6PudtsW5dUcw3gqzwcRcriW3qPC
wE+Xj8kXsJxtaKmDJc7IsXY/bI4iWMtyImavPKOHhS1nOsjyAyAcRDc0VUbYgstM
1GNMCrioW8SA8NQl8oEeskoRtwMHW6y/+LLtzS2JRYhJC692hi43UfVSsvBVIqR3
y4LnIP2GIxNFF1AAiS7Mf1HEpM0yx8ah3oY5IRnUqMppxO72pTb/0L4ahwtdoC7d
1Xrjpqc+lqh4aXiMBz3ZGlPE5BjRXQeE3s4fvRNFsxsB+UVfkxroKTwUCP038S8o
k32oLEO95sFZj+4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307025994652679879967202473523708307866530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casalpusterlengo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799622140071112175282205325057957931734605770682039116625969568332875797331296827808476067645420449900990651251697967204503663994654789979186886521783274405747053396745404112845235351159097827604152438113761287591742510347848153986021289515751111977372618800428958050543894037391496054943177572904237821230437926962631614527138894961151064383352852977467203282515344599784591518812629677565694905493277256615258032237755246684181355825731708094129925218063580313438534161322670638753105791646400789510558508673942078693498787366180530615351310306174347444492535038008887131158665462841499345145320353422506335728438457135134600577491336783703146987713908968265292765757365235598713776949379557672208605401355730248991243378434674697074230593725160735173428955461150532664428428082629007464717392547609437390592539233301877310853437775341718973244791637292620160882208774970481272845413838598774689996226001362025200392964691618573306321010616649825768549483611646457494399407728733876588574348913027009711164860642939424206286637216265719160454036677845712867902852751331070175886065794324109792491282009200796269884485929964612707812937941897225288786835213536082420030021804722073703735981282905834938402417065107623440462390513563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e929031a11734b4dba37d1a82364f22b5efcd59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casalpusterlengo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016affb877b300000403004630440220214d22a73cc7417af3bf25e6a1891d4bdba607a7f89f18cf1343d18de4d7e7140220404313511cfe794507f07d66f66fed2faf01b595bf956a3e9b0674d6832d8b3000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016affb8794a0000040300473045022100d5f06c17d4f69f3f041646fa6e8f7062d3c955844485ea22be4feb3fab27cd9102205b80a0b367ac75110864ca26c1a140898b758e8dad62b5dbba773af12fc0951d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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