preview.operaduomo.firenze.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:ff:b5:e3:cb:d6:6f:71:44:a1:54:aa:1d:e9:bd:d7:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=preview.operaduomo.firenze.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:ff:b5:e3:cb:d6:6f:71:44:a1:54:aa:1d:e9:bd:d7:fc
Serial Number (int): 306934310160678765468977764217156955658236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:c1:91:28:41:6f:90:5b:e9:45:6c:c1:3e:2e:26:89:51:b3:09:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:8b:f8:dc:bc:2f:d5:20:92:d9:4a:5d:8a:87:31:5f:df:ab:d5:3a
Fingerprint (sha256): 32:24:ad:d9:c1:b0:d1:50:9a:b8:97:9d:62:93:4f:9a:f7:84:5f:6b:d6:c2:84:7d:6e:82:1c:39:be:77:70:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate preview.operaduomo.firenze.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preview.operaduomo.firenze.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preview.operaduomo.firenze.it

Other certificates including the domain name operaduomo.firenze.it

(limited to 100 certificates)
codicicorali.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
preview.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
sni.cloudflaressl.com
museology.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
operaduomo.firenze.it
preview.operaduomo.firenze.it
autography.operaduomo.firenze.it
preview.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.codicicorali.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
*.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it

Certificate

The complete raw certificate details for preview.operaduomo.firenze.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306934310160678765468977764217156955658236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 09:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 09:47:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preview.operaduomo.firenze.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840986727204783864522192585909536391876995144865093477575289588443623594523119202515726897315196608393168573238130795491654262629401200325905076327535951033820858113473483739078420033591700026790595501612872417341265104340324374751283371803566225112199749981710814419202857499395097921333529258253765643977215323686318796320820610588761373196541457402478191782196080535200666640846107681107826105435540310822759688210640326945824552489274668046800755882793776129725584098315610323622679896577316411977530552171676875439239042881806807962838639787287330377437547317308322415565041436473723874656225899300177100155529956261447013120159502796747081655672323726698005385546597354352297509873962078272255710009719000866964646250253917016243518429716478345547060646384711794360193521575706177635627032321503736298480686451766202306386406024610852523895760097441678315478625862283006026121812048358374576087079303964527664274337338621595740433623891860727201265015485821357726867347491745366410005703188389576764051941533105911834799366339871787390605992329089560054252004910769172407400221187156172529437521857020776969070464224294343778224247872161705639890942118572380631966179302716951968157951720462048558375807333837534955343495677747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cec19128416f905be9456cc13e2e268951b30995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001687a52782e00000403004830460221009a379f4496e4e02f56c1df6e43cef67c0cd91eb88d5d24978364e133a419975f022100cbe26c35254cdbc50a47c001c8449529067eb8226522b59625de96b25e5c7af8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687a52782e00000403004730450220699a4f8cca97a2c9594779fe64a86212f1cd24f8d483339498ef3411d1c497a3022100c9b3623249a486fc532e932ee835bafa8c1edf3ade319fb66a871c481bdc2b35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00779b743e1c118064650816f82ae0fb48e13bf4cb52981711e6eaaded2386563299209e8ec61a47f0cc080b948e3a1da263f674a7e0ffb0b2d31fae93083d99642ae18396597523cf68ecf6a1bbfd751f785984ca57cca7e5f07d5935991c37f101de384514fed6e32f55b9dc5fe4a77257ec3db224028ebae7052cc24c2770208247cba511c883195373a19c2cc1bc5eca9d8e937c5c7612176ff626505c4ae1965b062ef1cd48fae1b3adb032270659f5bb8833957e976c7d5c87c09f7496c0d734c5275dcd1bf1e69545e22c0bc580cecea47f528f13690e668f45a78941814e52e9b8ad155b9ee02232513e2085c8f4b7a63f8bf1a53a679a24aca5d49a0f