www.castellettodorba.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:ba:44:12:f2:9d:e3:a2:75:9b:2b:b8:71:e9:43:7e:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.castellettodorba.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:ba:44:12:f2:9d:e3:a2:75:9b:2b:b8:71:e9:43:7e:bf
Serial Number (int): 263966424231435136438832030486689306869439
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:54:ac:1b:f4:de:f6:39:f0:43:fc:d5:57:60:1e:06:cc:04:38:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:6b:bf:e3:79:e7:60:a2:b3:12:0c:4c:d8:c8:ef:0b:26:7b:b2:62
Fingerprint (sha256): 30:f6:46:b6:a8:16:9f:67:42:d6:76:21:b9:cf:e4:b6:d6:58:f0:6e:44:40:e3:13:43:45:14:51:be:87:8b:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.castellettodorba.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.castellettodorba.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.castellettodorba.com

Other certificates including the domain name castellettodorba.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.castellettodorba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8KARn0/5hCa5QSv8Rvx7
JdwoQDtBBcBAwlz9fZiedD7zv6AHERP/Q+zBZiYbiyu16NpLC17eVvYxwX/uvkfd
O6R7iTBqxZq2HQTVcGweu8zmF7WVlXTx1OdBZ3W6LbEQcW2WtrOlXAGUQPaofBua
alyW4h6KLn5qlN6d2fYUP6T8ku+kjbSLa+ybjzm2JygF7j36O/IyZedXD0/9UmCa
3PozUiVh+beCnGFthmtkFo4PoSlgZU9HOQq4KLth3wc09nbFxZLgzb2Jp7AeWvVd
nt7ZmKklBpHAWBpIILKMPc09xNfnuNA24Vllki2jQO9ssDqwkhC9bf8DFCl7uARx
bpwI0T0y0qJJZNNjHfRalul+a1rGSs+sFGyphL768ayZmnIWpvkW4RHSULokCyJa
j0nIDTaiph8jjiPgIw2q0uHhBlTxJKztb7ayZVlhLBXyo0p9cKzTZNDW/VlxeWvn
nPiZNxga0oqvuaUbpS2OXd90fbGuHIZ09nPlVvefVCulmqGKYG6NKTO6wwpRc1+2
Sf3rZE0LkddZiFqXP2F6m6fY/KR566pUuK9WMTkWqu3TFgV2G5/PlESxZr95JOQh
KK9ihrYAX6Jv1L25O1A0VFmX8zydis7cwCIYuJ0axFipv/Qo/xZc4unP1uAim4Sp
R1PJNA3Y+cm299TIowrezeECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263966424231435136438832030486689306869439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 23:18:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 23:18:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castellettodorba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981665450863941059186264145354624325935359748098673886029702748138029208163495726498250231824931050468701749612813854203382107160974074651652845645657862305859551567559168798520016385711708398908881105293885222076459915155611389235554560486163966640178546270203841789485792484003849265282120532868723034087907812015908757984002503151906282912507678203017503545410932284982071604966927916795113124376797157662693294413487711563081708912488054641098232134012239971992211923038372072332389186205682493136181614975228024331132984301552757584889705832868434191612607808988359787945192991652827848419338491087291218051832158764925045562862020558436787794225085026518290662181078830746656552526949238154696360446334582347449496427088843634122410869546187048824415658605698436784689540404921456434075833033568151333565577612607448570213269011312090940775049954727752448694396599731285029720153799637680820262466312191665303100301231694740237773211650589991486941503096352044952626249509976143511880717107003641056997046342139965618238464204219807197503270649995908976232793193235075779989051861374032446718346353232418178271991818727131712806123382262247292460983569790812765725883232693757007739492346107461846698675490739317544288759238113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce54ac1bf4def639f043fcd557601e06cc04389e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castellettodorba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017012b6818500000403004730450220403dcac1c8f242ac535dc08051f35cf1a70d76a00e855385bac7bff8ccd52368022100835f2068345fae6b43ba16711778741ee4eaaa8e2b8c5b2a40ee962eb811eb4e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017012b681750000040300473045022100b9aa0ede7dd8c0f127fc592f411f51a6d3b0d10c725ab20dc50d5b0be3e97de202207c2f045a098bea4377c7a89d04d798636507c8059bd91c27d550491fc30a245c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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