8.pettegolezzi.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:9f:73:1f:e7:78:db:d9:3c:ed:c3:7e:7d:56:f8:d8:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=8.pettegolezzi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:9f:73:1f:e7:78:db:d9:3c:ed:c3:7e:7d:56:f8:d8:c9
Serial Number (int): 309868898910616342116447245334701011425481
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:bd:e1:d0:5a:ec:4f:0c:48:68:a7:15:26:58:cf:c8:d7:32:70:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:ca:bf:61:98:a1:6f:5f:c1:4d:c3:02:f1:76:c8:f1:f4:9a:05:ab
Fingerprint (sha256): 34:12:9e:9d:9a:61:01:8d:d3:b0:e5:88:e1:ff:b1:b2:b1:e6:8f:45:cb:b1:c7:fd:52:75:97:a3:19:24:87:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 8.pettegolezzi.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 8.pettegolezzi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

8.pettegolezzi.org

Other certificates including the domain name pettegolezzi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for 8.pettegolezzi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309868898910616342116447245334701011425481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 18:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 18:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8.pettegolezzi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730153287712783927737273947933806122006732175120586786453334675011499094335429708233407642105094492414174887418569650161407030805381736539351453263797883435326503265053741262153055943530728311010343260037342223790648556403316187398363740437789747562560848801371178849444429903922133973165855297655385253490611753963744030793836960669610653854238781030698017957489635199715599663192810844459721260776073679236621095000464152829205662161220759099547794757316468937834379128477867309601858976575278458984204074537726098758971002259778445175750799121959839394712860454275073822617576053986790298131531358359153326368096860244338583747514995463989170347127452865848183401732555166701621464895248375924870138430925240430203236361380655973998098015711510885406091806529426081602409177188341732588612214344224616477522319678406546884887875793739545093671174818296973934722833560083981320442546784808194106062555354248918023945683262481123642041968011463538760601675395796495690434708938044558287964371711826795851861231389078732345913390410174169970417316807677177076309397099949001097637414713968153254649542366414726486076121083513495841015568824672362565969282338831847807841733963946240022299550386590368348375399200996729564824639496777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cbde1d05aec4f0c4868a7152658cfc8d732709f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8.pettegolezzi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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