calolziocorte.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:e4:8d:32:c2:e8:fb:ce:c9:a0:04:f2:e6:f8:01:c7:95 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=calolziocorte.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:e4:8d:32:c2:e8:fb:ce:c9:a0:04:f2:e6:f8:01:c7:95
Serial Number (int): 348412658486578911002286813868784636512149
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:f1:8a:1a:20:7f:d2:88:d7:15:dd:9d:de:0c:23:77:38:ad:78:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:4f:91:e8:7d:f4:28:c8:5a:91:6f:29:e5:e7:58:89:25:ae:fa:29
Fingerprint (sha256): 35:85:e9:af:79:d6:62:58:d8:b3:fa:a8:d3:80:16:28:a9:f5:b8:4b:6b:73:12:d1:96:eb:dc:b5:bc:bd:cb:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate calolziocorte.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for calolziocorte.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calolziocorte.org

Other certificates including the domain name calolziocorte.org

(limited to 100 certificates)
www.calolziocorte.org
www.calolziocorte.org
calolziocorte.org
calolziocorte.org
calolziocorte.org
www.calolziocorte.org
calolziocorte.org
www.calolziocorte.org
calolziocorte.org
calolziocorte.org
investindubai.ae
calolziocorte.org
calolziocorte.org
www.fontanafredda.org
www.calolziocorte.org
together.bible

Certificate

The complete raw certificate details for calolziocorte.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA//kjTLC6PvOyaAE8ub4AceVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMzU5NTlaFw0x
OTEwMjYyMzU5NTlaMBwxGjAYBgNVBAMTEWNhbG9semlvY29ydGUub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8sg1Pif045LqEaF8E2SI7shBYqsB
+sXfz7+gvXd4W0QuG+eRhN0dLGixTRZ4KyGJ14aI2ca7q7nzifU9GLqwNprzsiHR
ki52MAfGF5qsLsWVnDQMogFWidtQ30FY0VMD1J44p94i/EyuER8cDnph30V7h/xS
96DhupMsGOe+DZw4FryA/qFEfCWsy1lQxPaptSYWBb4RgflNI+CNZFFwKm8Tm8Kk
nNDsAyiGzX/ds19q99YS4cxvNEgJKD98/oTPixJmUwVkeJg8/Mf5X5HlqUFj31mD
ZUcQh3IbKjzz7BDupp4PZxvTa3Xwt1VNFuqzmTN+U/LLBjcogizG0Gy/dk0RW6Xn
flTVj5uueqZBI0GQvkq96VGkaQLH/hnTxwqfKI8GxvfNZf3YDGhR23HpEI4flfju
VoigYr1og8M+qxgivMf65b/S5j/5+3M0ItLBXf8XQCedqjvoHXPDnyZJM/5YczI9
hpaweAH5yDTaL3vECNeIqQtDDRoShhnTjwm0GhjALWtP/Qlt9IqfGTPyQONWacDk
wlK0FjVHyePijJqAYuryXdB5bMm3QG6F9cdH6fr4nPWfwcRxkNTF7BHMHUi2p0dS
AdIdMOM5mk9cme+uWCivQrc/HtYBIXvycrnPCEQr7swmVXm0MnH3hRTCa6f38fcd
kql2NtdqKPttUakCAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
6PGKGiB/0ojXFd2d3gwjdziteE4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFjYWxvbHppb2NvcnRl
Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAAB
bDs9xQcAAAQDAEYwRAIgaJuYJ+YrhUgVFE/k9KUP7RduMvGX8v5eedioCdoHdjsC
IE5vK6UCDXQlwI7nIaT+DmwHaZ3jW01Gv4HoRzvayEzSAHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFsOz3G0gAABAMARzBFAiEAmTWNGpOuvyjf
ljYvCG7r4+Lx5jc/3zresQLngQjF9tsCICp7rqn8bfB2U+/7eokjCP+c2QxevoyM
8Xwx/lltI4l5MA0GCSqGSIb3DQEBCwUAA4IBAQA+HqBV2PB+nm/3SdJBJQeRGfaC
c2VD9y0ybFc72m/bsU21RnIyFGxeXoxyZN6eMRXsv1umu3+4xUQDtimtfz7bE2iD
cpBueUf8L/Ou2vziil6ssOZ2UVtEwjWxZ3NqkBG91cYpmUUoQEv6m53WigFAthwk
rptetbgGCRrbyfA031Oj3kQGvP0+6BCGaWs72M+d1IS4sov3xKkU1YYG5n8xq65i
aKnnpfTplD1G2KzBl/UqY0PlRx/v3oVCB+c5oRyNmCLSG1FXvYPwy/cHzmAEnyIP
qPAytNYK4Y5vwHjjhhZ3JxOf4fJBFhSJp0OKdMkRl0SpbBlKslbDweCTnjfG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348412658486578911002286813868784636512149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:59:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calolziocorte.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990464400775939524742499517250614122326159258419858860609223950615680307322833137138560284760042236231756139282801927058835158985687036745474286975304300925655706722986006749147125519451221269263297711838534608969289678051066059371087657664955096057684753537982770832454576432947640716702312796427101172057766383542055947686734504055441612214163097416255627335816715495052385622199678052603280982240193536812635242526917877585085452738759381320864284096935530838407982806641098006747294564685271869953264172130290915294231727491234221416028779668601718841841113340443934105736183848786891442566321639884281102263966839628844598745712817539329333990093863747896253575378173586966481698102860782378402480365675818656823678547556453567829258817473138445024245334676234708540638857264778971112507495173460191461627541768335786198073739212237061333276697783384943184306283180454892185307313013995636726711728091555125423138434898548007525442161511596988016552383367354465175089444441618376440338119365921918942585364908054269018074463054427192527597674750736056078571315894892519868771235084256909973591273141497751051289684180830988475929790612933243891320667399774251022935748113643885337493115940150779241576798527540513578327166767529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8f18a1a207fd288d715dd9dde0c237738ad784e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calolziocorte.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b3dc50700000403004630440220689b9827e62b854815144fe4f4a50fed176e32f197f2fe5e79d8a809da07763b02204e6f2ba5020d7425c08ee721a4fe0e6c07699de35b4d46bf81e8473bdac84cd20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c3b3dc6d2000004030047304502210099358d1a93aebf28df96362f086eebe3e2f1e6373fdf3adeb102e78108c5f6db02202a7baea9fc6df07653effb7a892308ff9cd90c5ebe8c8cf17c31fe596d238979
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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