www.selvazzanodentro.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1b:ce:e7:71:ff:ae:19:73:da:14:46:01:e0:fd:ef:05:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.selvazzanodentro.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:ce:e7:71:ff:ae:19:73:da:14:46:01:e0:fd:ef:05:55
Serial Number (int): 357911790333781687130732652205211628012885
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:b6:56:c0:76:5a:db:f7:50:91:69:33:01:ba:48:ce:a2:af:6f:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:b2:d4:72:ea:a1:95:51:11:7a:71:cd:b5:25:c2:72:a3:51:4b:ba
Fingerprint (sha256): 35:c3:b3:ef:35:4d:c2:1b:8b:fe:93:38:0a:ba:c5:a5:ab:f1:40:ee:80:1f:d1:0b:ec:14:bc:de:52:72:94:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.selvazzanodentro.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.selvazzanodentro.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.selvazzanodentro.org

Other certificates including the domain name selvazzanodentro.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.selvazzanodentro.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357911790333781687130732652205211628012885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:48:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:48:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.selvazzanodentro.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855036637977154374127474015718360697629783089121815975530851053968743774101995244845767959065787643112677932010686403395745903959995828020302601073275272138933428794111987397872578161142272294824231900796317202377559286221578814699557059796870651272364069862280425508119588744323373289463551668764128286066466349645836237823116352552933693229340997893003095328819824404940787606851235762987590179005884788209336599432572298011004539999185219063683434877878073928496477843876253327286078306490643528788681154761073546405586474777740104111972852310458715389623812615159425924609315562099873240212147401498197916348254009616813116535297010193922676016770828992731564245683691552325333049827486092556692355781796231051738536773250840640109597875632496225364666666783866682845011968063531133257134298154289386185397801534422934858265497426681644140944910552012683347233412377298876156051987497111490074833035500821908853002377740660169137319892105056565130311147621522148587765586259059970933486347358246651055295496638211443451222763230165778893449790416575886864368206127139195104541612456585816723061404891295139897867469766020011136133944468532348230487977276903859326920080908776226223788732891916951632474823757860848161917974242401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75b656c0765adbf75091693301ba48cea2af6f63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selvazzanodentro.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec903c0fe0000040300473045022100f3f5e7c15f9f1c1e7ad56d8e905bd230275173ae622b795c406a9d8fd33b3b2c022056905b753b66f0410fafb72cc13363d33833786282f063c3f0d1d32206b974a9007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec903c0f000000403004630440220781e7e9f5ae47a1905d0c5a268a671b3a007f7cc0905251c1aadd3e1d5aaee320220197638f03141cc5eec8a61c69acdaae3f0ba393268d7b369e8c8f2324a64d4b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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