seakayakitaly.it

Issued by R3

About this certificate

This digital certificate with serial number 03:cc:46:ef:6f:2a:ee:b6:22:af:02:23:83:e4:33:06:40:14 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seakayakitaly.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:46:ef:6f:2a:ee:b6:22:af:02:23:83:e4:33:06:40:14
Serial Number (int): 330848749820555246872866567674756543692820
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:3d:a6:98:be:16:dc:92:b0:2f:b2:bf:59:76:a7:ab:3e:ec:a8:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:cf:68:81:35:c7:5b:f4:51:43:cb:28:e6:c3:de:5d:21:8a:25:0d
Fingerprint (sha256): 36:20:9d:e7:b7:bb:0a:2e:0e:7a:cb:86:13:30:9b:f9:be:fd:45:ee:af:d1:95:09:24:b8:28:34:ce:bc:bb:4f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate seakayakitaly.it

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seakayakitaly.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seakayakitaly.com
seakayakitaly.it
www.seakayakitaly.com
www.seakayakitaly.it

Other certificates including the domain name seakayakitaly.it

(limited to 100 certificates)
seakayakitaly.it
seakayakitaly.it
seakayakitaly.it
seakayakitaly.it
seakayakitaly.it
seakayakitaly.it
seakayakitaly.it
seakayakitaly.com
seakayakitaly.it

Certificate

The complete raw certificate details for seakayakitaly.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330848749820555246872866567674756543692820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 15:11:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 15:11:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seakayakitaly.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783067589000379425905294436163465157194044920766607513799608582777792494158932920309216309770503915474201216486791817960933622456438598441266461739320274143333964678764205153897592998108985698802430916933984660896701089767142534296119324335805421540959326227509167599854439112171295006608282121338260170700119803509034220165835284604658412371248352947786706760094115631948693370875197780032238885924562585730228534451600127611611232496730573445599424942482288556451368723485384616748154143060444175870601449734656813572310296531856257189973676821073712947314093134240552990048663785976270792178565100809001837512411796060817498738789867577847262329618557231771545024812682514211749040553727213390301806889615411801717966502377348705269988417985931679049990961373218119411932228855560558535555092715454766116902952330477271196985115580822655268792575303896750865731814676696725049807688093296777238483231405583234438866949945263011908675623783097674745644492854724660514486630822398300904653183641119902379547215602388354543863770729061783085652521551363940792942344823038118222216116360787273239296660945201608702718109068737104262267010474799409726759274328430304697080068886896626140776133856501552768799335310339443313571468756123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea3da698be16dc92b02fb2bf5976a7ab3eeca8c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seakayakitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seakayakitaly.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seakayakitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seakayakitaly.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba56783d80000040300473045022100d11a5b5c7d376f3699530fc0aee02193b5b3d0f828cb12b89d9e2364efdf680b0220128186946be8d3358f012f29fa330cf4d63d6c40441a16968246a79b710aa082007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ba56783df000004030046304402207e2d9fb0d74c0c5db5b6f4644eb7b461cf8cfba69bd41e868d3cf4ad8839772502201080dbd50fd15044663e7042c058c57305671b737bb53c2c777099354ee7ad7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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