arezzo.sczepanski.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:5e:f5:e7:ee:60:38:f7:ed:f5:7a:05:4c:31:14:f7:81 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arezzo.sczepanski.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:5e:f5:e7:ee:60:38:f7:ed:f5:7a:05:4c:31:14:f7:81
Serial Number (int): 298894142405040794599198469055852152420225
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:be:88:ef:cc:df:11:10:57:7a:d6:5e:19:5f:7a:24:29:7f:f9:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:d8:af:ba:de:8f:63:9d:86:44:df:99:00:3f:ad:ed:45:b8:f9:c8
Fingerprint (sha256): 2f:b0:33:a5:67:fe:22:cf:8f:af:bf:9f:f8:7e:82:ae:ba:69:19:37:e4:37:dd:73:20:0c:a6:a7:be:b2:42:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arezzo.sczepanski.info

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arezzo.sczepanski.info

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arezzo.sczepanski.info
mark.sczepanski.info
rome.sczepanski.info
scz.ddns.ms
sczepanski.info
sczp.ddns.ms
www.sczepanski.info

Other certificates including the domain name sczepanski.info

(limited to 100 certificates)
mns.host
sydney.sczepanski.info
strasbourg.sczepanski.info
arezzo.sczepanski.info
mumbai.sczepanski.info
reference.sczepanski.info
mns.ddns.us
sczepanski.us
reference.sczepanski.info
arezzo.sczepanski.info
vilnius.sczepanski.info
los-angeles.sczepanski.info
johannesburg.sczepanski.info
arezzo.sczepanski.info
vilnius.sczepanski.info
strasbourg.sczepanski.online
seattle.sczepanski.info
losangeles.sczepanski.info
arezzo.sczepanski.info
mns.ddns.us
sczepanski.us
arezzo.sczepanski.info
mumbai.sczepanski.info
mark.sczepanski.info
sczepanski.us
seattle.sczepanski.info
johannesburg.sczepanski.info
mumbai.sczepanski.info
johannesburg.sczepanski.info
singapore.sczepanski.info
losangeles.sczepanski.info
johannesburg.sczepanski.info
johannesburg.sczepanski.info
vilnius.sczepanski.info
mark.sczepanski.info
hongkong.sczepanski.info
losangeles.sczepanski.info
saopaulo.sczepanski.info
arezzo.sczepanski.info
los-angeles.sczepanski.info
availability.sczepanski.info
saopaulo.sczepanski.info
vilnius.sczepanski.info
losangeles.sczepanski.info
strasbourg.sczepanski.online
london.sczepanski.info
losangeles.sczepanski.info
losangeles.sczepanski.online
ein.host
mark.sczepanski.info
hongkong.sczepanski.info
johannesburg.sczepanski.info
newyork.sczepanski.info
hongkong.sczepanski.info
ipv4ipv6.sczepanski.info
mns.ddns.us
vilnius.sczepanski.info
mark.sczepanski.info
losangeles.sczepanski.online
reference.sczepanski.info
mark.sczepanski.info
hongkong.sczepanski.info
hongkong.sczepanski.info
singapore.sczepanski.info
losangeles.sczepanski.info
saopaulo.sczepanski.info
johannesburg.sczepanski.info
strasbourg.sczepanski.online
johannesburg.sczepanski.info
monckscorner.sczepanski.info
availability.sczepanski.info
mark.sczepanski.info
losangeles.sczepanski.info
mumbai.sczepanski.info
sczepanski.us
johannesburg.sczepanski.info
mark.sczepanski.info
singapore.sczepanski.info
monckscorner.sczepanski.info
hongkong.sczepanski.info
mns.ddns.us
johannesburg.sczepanski.info
einen.host
mark.sczepanski.info
singapore.sczepanski.info
arezzo.sczepanski.info
saopaulo.sczepanski.info
mumbai.sczepanski.info
arezzo.sczepanski.info
saopaulo.sczepanski.info
vilnius.sczepanski.info
sydney.sczepanski.info
vilnius.sczepanski.info
arezzo.sczepanski.info
vilnius.sczepanski.info
johannesburg.sczepanski.info
mns.host
hongkong.sczepanski.info
losangeles.sczepanski.info
moncks.corner.sczepanski.info

Certificate

The complete raw certificate details for arezzo.sczepanski.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298894142405040794599198469055852152420225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 07:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 07:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arezzo.sczepanski.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5254047262508436031614891841546373675245879575035150631365757385008038716592281983210205292316272518441713485594327469024316914382324206067159681440502875879751429515017481496143196689610741112354271875193528772055540874010123659028366707966871227949323545137645224046638796879511053843071404323224759585420899432370196569335475010388443815389373765167076705863891919515156741362763361821498896109763303909000128427485943826389539711131444228767502042615339104271015000977848566198322060282369489285093407275991896434265410139788756659541861269602879576650157563499950688033102223277005419133133483873171004303861956328856307731160672452699273953499644234046971696008316717606091614101362293944331011406389507006795217639907704683710374912503963557526500462283837271225490682572304277379954845302860681752441377221666900839450946655348303111539565623977398811651977243416546274758935882153986444869510812290921512127019065371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19be88efccdf1110577ad65e195f7a24297ff94c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arezzo.sczepanski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mark.sczepanski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rome.sczepanski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scz.ddns.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sczepanski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sczp.ddns.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sczepanski.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff5a7408100000403004630440220425aab41aef7ef8d12263f90d7739d9bbd2290893fb4e6fa4609c410f667e00a02200c698df7cc892f5e573379cc8cc88d1d8db95f5d30c2a5c45d20fc3396c1b82600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff5a740ad000004030047304502200b044d6aa40dbb1ee13d111cb9d990e2e948a27c286a9a07a88f6801f49dec43022100a4a8466bb17a78d236e718385da92e8441a8c25ea8f532a7311478d12448afc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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