nozzeinitalia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:fe:2c:1e:4d:03:9a:c0:37:ba:24:e4:db:66:dd:ff:ff:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nozzeinitalia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:2c:1e:4d:03:9a:c0:37:ba:24:e4:db:66:dd:ff:ff:9f
Serial Number (int): 347827222355950519039960650473368841093023
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:7b:d3:f1:39:af:80:42:07:16:77:04:44:bb:1c:75:30:57:58:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:4f:24:08:6a:76:45:6f:44:d3:82:f7:e9:50:ca:da:17:a9:6d:60
Fingerprint (sha256): 35:31:ae:15:a9:81:cc:96:df:7a:10:f0:bb:c1:26:cf:26:69:43:84:26:68:c9:d6:83:fc:4c:ae:16:fa:c5:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nozzeinitalia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nozzeinitalia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nozzeinitalia.com

Other certificates including the domain name nozzeinitalia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nozzeinitalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISA/4sHk0DmsA3uiTk22bd//+fMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjcyMDMyMDdaFw0yNDAyMjUyMDMyMDZaMBwxGjAYBgNVBAMT
EW5venplaW5pdGFsaWEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA1G/PSjp3NVtEN6DH6anuilghG6CT2u72bv1hYfo2i45DIbBCwwAr1uzwIBlr
9O4cJbkGsAHw56m1xnRIbucCrh25tmU4BND2soMMMcQgPI3RIMrTkA1Nwe9ZwqeY
nBACUMDg1gWW2MedonIVoVa/tjBEc+CXGM5UoRkfopaHzwz3rRb2onZC/tY/oYnZ
ICpvgHeW/srDUrcs+OaM4+QTU8Aj3nrvracekxjeK+fy/N48+vt9zC/Yc9J9g1+n
rOiuv2nN5Nw6H4m4kaYOa7S0B2Df8zIxcdjcHNLCPpXea2I/WBh7KpOYHQ2PeFGR
7xgAhhM8/dcNnOT/P94IcdWOqfblB4kgFIGC9kZxK+OCJiWnCYEUnymPSnqdONI4
HowaNiZVzR/eG99I1EDVXfwf2Hf9L3W2S6BaWsV7cHSkZ2moytx+qfhMxzaIpK9v
jCbaFeQ/tOIskJcpBNpLu4qkdxfy06z9HShT2fC6ygQcmIjTBlnnEc55E9onyLoX
uLJHHtIPeiY8mqAn1Ht0NGmABDJ3dpNXLaYyWpscO6B7ZP46hCUzUFeMFDWmCpzh
iWeiVlcrr3jvQ0Mc5MtShnBMNKT1iwHZiDpzKZ0vQFPULXdM82PmDUp7hFcIK02x
NTW3IDckHem6YyYlujRwUMKrjmh0vL+eD0TTNu8JR/aCXbMCAwEAAaOCAhIwggIO
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUy3vT8TmvgEIHFncERLscdTBXWB8wHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRbm96emVpbml0YWxpYS5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYwSsloEAAAEAwBG
MEQCIDSXCuVrdbtUNf+GulX4wDIdAZQCIgOvYbOTkkDtOBIhAiAL81QN/3TcHvO3
9uVBxbxR1D9um6ijo+7urC+bETRxBgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOze
w1FIWUZxH7WbAAABjBKyWgcAAAQDAEcwRQIgd8/dG29npNq80C0rRJTqvwGBzBVE
YTnVo9YmAPGhmTcCIQCIrX7xpP5kPvXBTgFAAnWbgoOtCQ7+FUU4ZLjJhQM+VDAN
BgkqhkiG9w0BAQsFAAOCAQEABV5mX8YVu6vWlsi4f4gHNbk5FoA995hARjy7c7mw
4H0AY1f7w3i3ebtPcSbBMqOCw7yr+XR7eu6x32DWQkUsv7E91fKVSkt0cvqiYxOi
NBtSYjFfSVIF61UtcMbjSXco80RVjIlk0C5WCxzO3W0F3BuZIlQsqfMMGGHljekF
+bfrXH9WQkMP1lwQPczOFKnjz2GT3wzyFysELxfRntXmelhaNhMyR4SBDHmIKjcl
27T4uFLY12AP+/N4xynk+epZgWKIIcdSDkQ7T8PUbXJx7xjW/8hQZzS5xj5fzl/8
LAEaPYSZQuhJA6oSQtK3r/9Smf10875OBIIyw3+lwOrYwg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347827222355950519039960650473368841093023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 20:32:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 20:32:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nozzeinitalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866666354478838784703177518259402164559525540946621251585735881503045679958087053489949840255283466575086760124383069508262839022566493932496248165288531312722380497665987033321883994131841966833437771235278625711710165546477955750062747700696726530573230925578123151728244794174507788183655373913131297803948264797868864126494199780093254728589521864547221976725256614047165367209111280247847320503801624557604942658235850834206235743765409670457037584767623792842240586680770830738254559246896444819714836959528571206474489733700444508751755469797349346032249226737785799264306260642001943513506876585183965859934286447243118768977467886324529159158336129867428491180242754648780609293765124240920297460395499817112772350121467791155721943441838700615717869931180957420447951789212709601335291890572251492199330458090923449021074948441277592510024513568773882710838643098474927993408442590193206610681418711092066359987835607028518064182434032492204039607774254518464061682240679197171668349231556947539313356146392997439500295407720352373372509139786708682341020169755282648557276099872307646960536796083500171470817276698784150717775395803782129204188703730963572609378588045851674730541702492306697068091044223441508502350224819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb7bd3f139af80420716770444bb1c753057581f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nozzeinitalia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c12b25a040000040300463044022034970ae56b75bb5435ff86ba55f8c0321d0194022203af61b3939240ed38122102200bf3540dff74dc1ef3b7f6e541c5bc51d43f6e9ba8a3a3eeeeac2f9b11347106007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c12b25a070000040300473045022077cfdd1b6f67a4dabcd02d2b4494eabf0181cc15446139d5a3d62600f1a1993702210088ad7ef1a4fe643ef5c14e014002759b8283ad090efe15453864b8c985033e54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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