farfallone.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:6f:58:57:18:5c:4d:ae:59:e1:ad:8e:40:94:73:10:e2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farfallone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:6f:58:57:18:5c:4d:ae:59:e1:ad:8e:40:94:73:10:e2
Serial Number (int): 270672484698301433129685581286164808274146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:92:5c:61:e2:a8:36:c4:50:fe:a6:5b:8a:bd:5c:13:b5:e3:58:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:98:63:df:23:52:9a:c3:6a:e5:08:01:fc:fa:07:c3:91:54:7c:3c
Fingerprint (sha256): 32:29:cc:0d:73:88:0f:2a:10:6e:76:f9:f6:73:27:e3:61:32:c1:2f:5d:be:a1:d3:31:8f:3f:cd:ef:82:99:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farfallone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farfallone.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farfallone.com

Other certificates including the domain name farfallone.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for farfallone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270672484698301433129685581286164808274146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 22:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farfallone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 928468605976662476645450174799305128358945629367879133890608158920117359717581178259570044329635265365293122483816781792257574197906110306765220940894341452376750950234458553401550679974893645411892450124428348065911792007156270181555015738737248624954259072792167230195675036729418132227034796345809172237695715561171207128441064091393737705030125959186505134494429765094107468714870834241685768886345821874962252448621668361775472311831568503369981681619274930656222305329524538212499797225011463586965043816430875996498139605322992478292727092423302524789343449259047461532281242813071384981217668149117251989857940763996002943252349535457228506758683912241698318055677224387312179268912820493158723783658215633739206187827593819212439042363275755160190756461183365151062411002348577654612393084216798739022217792259282706191896273273337223956615787152838233064770754661114007839328876591255009534608957114697951035680547537913707153130194206502276983012285572341091640307882649324330207592836551240467879136668451016789953619178439073625175302707601184860352294804717074602364383230271776801352155350600649055452193124855459327132276619973331242647373288635212462205296547489257819111180856546379527937406012174946711010138808897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe925c61e2a836c450fea65b8abd5c13b5e358e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farfallone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170987e0cf0000004030046304402207e1072bb2c42b33717ad4470fd0e9f493d8a68cb294dc665e31d5f2c35ed4e2f02202ee229f31cd9f15f5c69047470000b924c1305e60c8d55449fb483c0615c05de0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170987e0d250000040300473045022100f749a3ad4e7a04392b136499c3ee3972413c096b5a97f25c90c2e0ce80cee6f9022079c4ae91c009b5766be7487508c8a38cc32ec8951ec016b302e709c2ace36827
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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