www.sangiovannivaldarno.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:e3:e0:86:7c:44:a9:43:8e:e2:9b:7d:44:ad:d8:c8:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sangiovannivaldarno.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:e3:e0:86:7c:44:a9:43:8e:e2:9b:7d:44:ad:d8:c8:fc
Serial Number (int): 336842161442036056719073743584755952699644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:c9:0e:66:ff:33:0b:30:21:ee:ca:21:44:f7:e6:ac:4b:47:f9:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:4d:93:d8:53:08:cc:f8:ab:20:86:16:a4:61:1e:66:41:c1:fc:fd
Fingerprint (sha256): 31:9d:6b:8b:ba:a2:39:9a:9a:70:e6:b4:86:8c:b1:d4:fa:c9:f9:d8:6d:a7:fd:5e:93:4a:73:2d:4c:07:69:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sangiovannivaldarno.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sangiovannivaldarno.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sangiovannivaldarno.org

Other certificates including the domain name sangiovannivaldarno.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sangiovannivaldarno.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336842161442036056719073743584755952699644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 23:34:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 23:34:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sangiovannivaldarno.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815688802395778432821998266027011576697618122434958258658608195603794594686784515374426994916987660651046253575315546994164566821910417173524178345238366156358376694065756873485873982649351481401008511822263331059440045699951369983591281063254446525160252401054708412161480887188485328132277082399724847235439512433166546773221383635946329387633069225158056764451680666816523950628466335679875387188158763177252176162160472346161812421767604840828244722856178683627603302444703936682125481644016225403022823996194528068783411546614419381905452031938930194959250118275643974389173636445409056477996351936245851700454877139399563812759822612828495555605349571821496968930027402991793418701113393250763620022183065270602536351554286796703451967584270854734910411057055735008334324923024987171904266149624247306894669424785428994703840689041974827008943254058005967231533722558131967839039378275842051737146344110271335357995631235202259523178030745074383375666786239880430110411385082954746219783225621624406160515915469334066804386829414275129822523467877465570716920340307335667103549282285403189540753459169498816146931285538131723262489979642711068678451643890352755318825270651061224343098703001666218537868842339492280686222126251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49c90e66ff330b3021eeca2144f7e6ac4b47f9c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangiovannivaldarno.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700878ad800000040300473045022100af93ed4d18386dbe39863bbb182652c94fa9d0c8c669ddb329df4aa6bff3472a022062b2902aa5b35319e80cb7603bdf7410bf86ad657d8eabe5153acd24ba13d2ab0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700878af15000004030046304402204d8667c104dc640f06132473211931bb541bc1dc4a70b15ed2dc6ec0423824a70220710c44c230f5bbcebdf774e05bdb7aaa7a2d81f8f3ed2695ffef25d357322043
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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