www.carpignanosalentino.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:70:82:55:5c:ad:a8:0a:8c:d4:bc:11:a2:3d:62:61:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.carpignanosalentino.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:70:82:55:5c:ad:a8:0a:8c:d4:bc:11:a2:3d:62:61:52
Serial Number (int): 322056669372674857859471945180076029665618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:37:35:0f:92:45:d5:c0:c9:d6:a5:45:1b:54:3d:47:be:b6:88:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:d0:c9:c9:f4:43:4b:f5:54:03:14:6d:86:e5:22:16:cc:50:84:ea
Fingerprint (sha256): 36:16:78:86:1d:89:ed:00:28:22:7c:aa:4a:c6:f5:c1:09:b5:57:8b:b2:c3:33:42:7a:79:39:3a:3c:36:19:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.carpignanosalentino.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.carpignanosalentino.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.carpignanosalentino.org

Other certificates including the domain name carpignanosalentino.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.carpignanosalentino.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISA7JwglVcragKjNS8EaI9YmFSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkyMzIyMTNaFw0x
OTEyMjgyMzIyMTNaMCYxJDAiBgNVBAMTG3d3dy5jYXJwaWduYW5vc2FsZW50aW5v
Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPXfWfDHaVCZ0Jz6
1h2lXIXCzuwumHfMQYkUIgrD1gdFCe/v7Zugee/rChGXO1s6OQNa2DaBACWrnyfm
BmgP8d1b8jeW+xGzQGpf4EvynUmTNUHFrF61KUGgjMv2N6woLkHw1DMMyh6aGcP7
yeCcB0rJz4ql2YBoUzKue2icdocu0ZkDEDWHUoyk6pdFywgPA9yISS7vDgpWU5nt
PYTb43QJRd0eJDAo+834EUj0YjfGFHrtCG50oX6+guZkbv/4MgnFyick48t/8Dpj
Wh9cYqx2GW0vXbEoCE8+u+L7f10hsDzj68/0u6uOJjBoD9fzjd+WR5K9WF83YmXi
72JnWMubTk5X3e9s6FsgrSeAj9+f02OlJJ9TwhQs63HtUMH7J1HNPO8YgHoOSr6c
pD7G5fkVqYuDGaRX+FT8ZIQZ1yymhM5y/21rpTjR+6WCsZrQgWXxbVqSBQkGn2lm
R5Jxil8LiHnyCensZWyRHw2+Xml5lk1oSJKRRLkA44+oIHph1VxioIS3Mq946QaR
ERbTxw1an/mvdKtLv5/UAV0kAcW41n2rtQU+1O86Q5PMUwp/Do9XrCOrx1YuYh9n
Zsra0G9ZskwSqY4yKV58dpw+KQVsWouPAij+ij7bhS+FXE4tBVRujeUe3H1DlvH1
+h9yX8yNf4Q3qMc0m9m2E5yXP1RBAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFBs3NQ+SRdXAydalRRtUPUe+toj9MB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3
LmNhcnBpZ25hbm9zYWxlbnRpbm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9C
cMK//V5CIAjGNzV55hB7zFYAAAFtf4vUogAABAMASDBGAiEAvTigUqUfKCTppNju
9Ql68IjKtY0iSV0cB6CGmjvaz38CIQDjHNdN0eyWWz58bQCvcxkjrN0Ekwob5EK3
Th+T4EP+fAB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbX+L
1KkAAAQDAEcwRQIhAPpSTgpKOE70VtvqsrjBTRshgX7IVxJkmiz1fhniQ1hxAiB0
9bz04dkLW5ukKtyD+JYy/SbdBzANDv5IZP1M3o7JFjANBgkqhkiG9w0BAQsFAAOC
AQEABK/ImU4aDXnPxfdXLvpXsjbbCKn8lpmxVdcM2culJ8bgWyGaTIZ/VfTzfPtW
8A52Sl7RwYr28s0/34gYOqmNsVsZj89IVMxtOJmIbrwOa3TaihN/u903IQNoPIK5
l1WjSVHV5HCrW88wVSy3uBjZeSdmMk2gt9yemre8NpYU1kc0XN/uGLuUT5uvXzyO
AEP86Yg5vacejgrXqMo55M68btbudEAl1TVWQsstrhacQ59FhUi/5ypYl8XkfLNs
FmXUdQQGb8tucyuS6nJkgOkN8bY2/NgFXvLQlt2v6qV9ns8WTP6eGc2XSYYD7cKK
tbV7vqzsWJ1F81zOqqY3FKgEdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9d9Z8MdpUJnQnPrWHaVc
hcLO7C6Yd8xBiRQiCsPWB0UJ7+/tm6B57+sKEZc7Wzo5A1rYNoEAJaufJ+YGaA/x
3VvyN5b7EbNAal/gS/KdSZM1QcWsXrUpQaCMy/Y3rCguQfDUMwzKHpoZw/vJ4JwH
SsnPiqXZgGhTMq57aJx2hy7RmQMQNYdSjKTql0XLCA8D3IhJLu8OClZTme09hNvj
dAlF3R4kMCj7zfgRSPRiN8YUeu0IbnShfr6C5mRu//gyCcXKJyTjy3/wOmNaH1xi
rHYZbS9dsSgITz674vt/XSGwPOPrz/S7q44mMGgP1/ON35ZHkr1YXzdiZeLvYmdY
y5tOTlfd72zoWyCtJ4CP35/TY6Ukn1PCFCzrce1QwfsnUc087xiAeg5KvpykPsbl
+RWpi4MZpFf4VPxkhBnXLKaEznL/bWulONH7pYKxmtCBZfFtWpIFCQafaWZHknGK
XwuIefIJ6exlbJEfDb5eaXmWTWhIkpFEuQDjj6ggemHVXGKghLcyr3jpBpERFtPH
DVqf+a90q0u/n9QBXSQBxbjWfau1BT7U7zpDk8xTCn8Oj1esI6vHVi5iH2dmytrQ
b1myTBKpjjIpXnx2nD4pBWxai48CKP6KPtuFL4VcTi0FVG6N5R7cfUOW8fX6H3Jf
zI1/hDeoxzSb2bYTnJc/VEECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322056669372674857859471945180076029665618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 23:22:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:22:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carpignanosalentino.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1003072147952115935968324810970944701057720390072887739213964015915987028206284968647555481311291878313945469583985450699237995833015092739400138936472020894810403810202112871990240187606577042302823040625102027776140607530129644485451057209202359101442433577112852398917877849819933418839128011240609277008618138902617580194663312955239203176234560346867241432361543200779795714989105632214840645001219413968063593154142381495458615774928319197912608402047034646736676311343959386055932578378341112366085172380639968495454684939901184309442637970383207890574354885147377633647195150252773690240453301974535362573167286318212447838976305887137914856942469200227495998106379637463893592446689306260287789505297579201078108989730121606469012186648469853438638091660697341752169297943149983425782733941558315317431154399601086439827695423428941634755700836415775521122072818653638664777905288483790145295649724857897452661518650178920877585786780555246746838001506810422656290780194644120137442537794368712807543385411605186103947146558828818452336429850434953851547907465487453670321701989509901588878161250546015909946861273266917775110474008540687508186389568114634597830497173024245050429851684692348877469165422193209961552279458881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b37350f9245d5c0c9d6a5451b543d47beb688fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpignanosalentino.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7f8bd4a20000040300483046022100bd38a052a51f2824e9a4d8eef5097af088cab58d22495d1c07a0869a3bdacf7f022100e31cd74dd1ec965b3e7c6d00af731923acdd04930a1be442b74e1f93e043fe7c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7f8bd4a90000040300473045022100fa524e0a4a384ef456dbeab2b8c14d1b21817ec85712649a2cf57e19e2435871022074f5bcf4e1d90b5b9ba42adc83f89632fd26dd07300d0efe4864fd4cde8ec916
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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