ip-90-147-167-221.ct1.garrservices.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:38:33:2e:0e:e2:7a:a7:bd:bc:77:97:33:51:46:17:49 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ip-90-147-167-221.ct1.garrservices.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:38:33:2e:0e:e2:7a:a7:bd:bc:77:97:33:51:46:17:49
Serial Number (int): 297141208831053147105099075495406304892745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:cd:c5:be:a8:7d:0a:37:92:d1:41:21:4e:07:f9:6c:82:7c:7c:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:9c:c6:35:94:e4:e1:17:fc:ee:f6:ae:17:f3:0d:58:0c:d4:75:72
Fingerprint (sha256): 33:5f:ba:44:cb:30:f4:c6:74:03:19:d1:b5:21:23:56:d2:f9:07:15:69:fd:14:2b:c7:24:8c:a2:13:82:3a:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ip-90-147-167-221.ct1.garrservices.it

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ip-90-147-167-221.ct1.garrservices.it

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ip-90-147-167-221.ct1.garrservices.it
pgadmin-t.d4i.d4science.net
service-t.d4i.d4science.net

Other certificates including the domain name garrservices.it

(limited to 100 certificates)
aarc-tut-sp.pa1.garrservices.it
aarc-tut-1.pa1.garrservices.it
geantsrv44.ct1.garrservices.it
geantsrv25.ct1.garrservices.it
geantsrv800.ct1.garrservices.it
git.garr.it
comanage.idem.garrservices.it
cloud.garr.it
demo-idp.ct1.garrservices.it
ba1-r2-idrac02.ba1.garrservices.it
wiki.idem.garr.it
speedtest.ba1.garrservices.it
aarc-tut-5.pa1.garrservices.it
git.garr.it
comanage.idem.garrservices.it
cidp-api-server.pa1.garrservices.it
ip-90-147-189-62.pa1.garrservices.it
geantsrv100.ct1.garrservices.it
geantsrv13.ct1.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
geantsrv14.ct1.garrservices.it
www.support.garr.it
aarc-tut-12.pa1.garrservices.it
vpn.ba1.garrservices.it
idgw1.pa1.garrservices.it
filesender-ng.cs.garrservices.it
ba1-r1-idrac05.ba1.garrservices.it
liferay-decide.global.garrservices.it
geantsrv8.ct1.garrservices.it
nagios.cloud.garr.it
cs-r1-idrac14.cs.garrservices.it
aarc-tut-10.pa1.garrservices.it
www.cloud.garrservices.it
portal-eiscat-aarc.pa1.garrservices.it
keystone.cloud.garr.it
dashboard.cloud.garrservices.it
wiki.idem.garr.it
aarc-tut-7.pa1.garrservices.it
aarc-tut-idp.pa1.garrservices.it
cloud.garr.it
e3d-mp-ds.pa1.garrservices.it
geantsrv39.ct1.garrservices.it
wiki.idem.garrservices.it
ba1-r1-idrac10.ba1.garrservices.it
geantsvr12.ct1.garrservices.it
gitlab.global.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
geantsrv42.ct1.garrservices.it
geantsrv32.ct1.garrservices.it
ip-90-147-189-68.pa1.garrservices.it
piwik.global.garrservices.it
ip-90-147-167-134.ct1.garrservices.it
aarc-tut-6.pa1.garrservices.it
git.garr.it
filesender2.cs.garrservices.it
geantsrv45.ct1.garrservices.it
openstack.cs.garrservices.it
ba1-r3-idrac12.ba1.garrservices.it
geantsrv43.ct1.garrservices.it
ba1-r1-idrac02.ba1.garrservices.it
geantsrv14.ct1.garrservices.it
mon.ba1.garrservices.it
geantsrv500.ct1.garrservices.it
aarc-tut-17.pa1.garrservices.it
glance.cloud.garr.it
aarc-tut-4.pa1.garrservices.it
keystone-devel.cloud.garr.it
www.support.garr.it
ba1-r2-idrac12.ba1.garrservices.it
geantsvr15.ct1.garrservices.it
ba1-r3-idrac02.ba1.garrservices.it
idp-csd.pa1.garrservices.it
filesender-ng.cs.garrservices.it
filesender2.cs.garrservices.it
daas-playground.cloud.garr.it
geantsrv15.ct1.garrservices.it
dashboard-devel.cloud.garr.it
ip-90-147-167-221.ct1.garrservices.it
aarc-tut-13.pa1.garrservices.it
speedtest.ct1.garrservices.it
ba1-r3-idrac16.ba1.garrservices.it
ba1-r3-idrac01.ba1.garrservices.it
signup-dev.cloud.garr.it
aarc-tut-9.pa1.garrservices.it
geantsrv36.ct1.garrservices.it
keystone-devel.cloud.garr.it
liferay-decide.global.garrservices.it
dashboard.cloud.garr.it
keystone.cloud.garrservices.it
ba1-r2-idrac04.ba1.garrservices.it
ip-90-147-166-216.ct1.garrservices.it
ip-90-147-167-221.ct1.garrservices.it
ip-90-147-189-61.pa1.garrservices.it
git.garr.it
aarc-tut-13.pa1.garrservices.it
aarc-tut-8.pa1.garrservices.it
www.support.garr.it
geantsrv30.ct1.garrservices.it
geantsrv9.ct1.garrservices.it
ip-90-147-188-207.pa1.garrservices.it

Certificate

The complete raw certificate details for ip-90-147-167-221.ct1.garrservices.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEAR81W5n0bY3BnP0xj6CQxRPlazH6
vZfyEO6K56nGjVbP5wK46vWVf0+6ZhK/wS7Ov0q50mr7Zfi/I2OD8W5UUA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297141208831053147105099075495406304892745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 02:24:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 02:24:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ip-90-147-167-221.ct1.garrservices.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004011f355b99f46d8dc19cfd318fa090c513e56b31fabd97f210ee8ae7a9c68d56cfe702b8eaf5957f4fba6612bfc12ecebf4ab9d26afb65f8bf236383f16e5450
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60cdc5bea87d0a3792d141214e07f96c827c7c77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip-90-147-167-221.ct1.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgadmin-t.d4i.d4science.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-t.d4i.d4science.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c83db42c100000403004630440220475ea17cf32b76801c78f67182cd11ea826d4c39bb7561d4a3fd0202ee8385ca02204d7a72080fdffa351f00c1472c8f8d70598731709b4b3b0546ed1e177bca2a0900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c83db44600000040300473045022050a596b799435cc573c352c58ea16e67ec52e014812296a218ee460ade9fc999022100a79146172435f93a48f5ac958fd62a4087fbdc6e4e375f0a4ac3040d5808dbf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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