www.selvazzanodentro.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:24:67:a7:42:cd:1b:4d:66:70:4c:c9:25:ef:07:13:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.selvazzanodentro.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:24:67:a7:42:cd:1b:4d:66:70:4c:c9:25:ef:07:13:5e
Serial Number (int): 322976356614850227854705569702757492265822
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:78:b5:31:40:c9:fc:5a:88:f0:57:e5:f9:1b:f9:79:25:e9:d9:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:e9:e9:98:dd:60:f1:96:18:35:19:82:09:33:a0:94:4a:83:81:96
Fingerprint (sha256): 36:ae:fb:50:ca:5b:cb:02:14:14:60:2e:d0:57:fe:da:f5:5e:d1:72:c0:52:68:01:cf:58:9c:49:4c:fc:f1:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.selvazzanodentro.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.selvazzanodentro.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.selvazzanodentro.org

Other certificates including the domain name selvazzanodentro.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.selvazzanodentro.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISA7UkZ6dCzRtNZnBMySXvBxNeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgxOTQ5NTBaFw0x
OTEwMjYxOTQ5NTBaMCMxITAfBgNVBAMTGHd3dy5zZWx2YXp6YW5vZGVudHJvLm9y
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN3rxuQfX6kdmgOpKVkk
LxFAEG+MYirTwksA4ztzDav78kgYHbfr+jQpkHA89ZMLx70f5Dc1Hz2n6X2awVTG
07BaWUPHehCMVdPDMJj/YEleNqbsRxSuK5dZ8/n8UDbonsVqcHG/SDU70wGrtB0l
iFjlEt+GC86ZKiEoX+hcs1U7S11V1km3ZGYy6uILOToFVlMH5dCevX0PHSWCGevq
CLz4rLyVEW+cwAJSWV4WKN6yxI0C/zbrrx7r0Qjbp3a1H1NEBSIU0gFKyuyz7dKS
Y88XjPIe5UpFDH8cG+7vDjLC21H8I5cC/FkpUNCxvbwmh0+VCMzLCutn8mRCVMLt
+vW0ELiEsR0ckw+RKd6vlf+tXdn64a1OX3tSlDxj1xRIIVvK/KaCbQgH/WJcZgq0
ppUQY/vegZWTVS1Zu386r4aHXpL+ZVeL1FYJOV47a9boxZW2d3+TlVeZ3k6lN/DC
S3Je8/CkTHSePebXKUKy4cF4RSsuiOik/lMOb5WpiaDO9iho1Cz2CbtXaLZAxgAT
9BjqSbVHITxNfO/mdG7hPW/i6ymktgaske7gUHhuTCODRQSNvutwevFB38QwX9Mq
7roHnHw+ODABbBNNHo3qr4UtvEGQsEWSJjqKO0IsUz4bsOROrqwzjNwvl0njIQCF
slH+jddqMy8g21LzzRy2x/o3AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFPB4tTFAyfxaiPBX5fkb+Xkl6dn3MB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LnNl
bHZhenphbm9kZW50cm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFsOli/4wAABAMARjBEAiBvGas2+7YFqzQNBxg/K28ysmw5
514HHNRgIVSrBHMniQIgBBaz5D9nHcc/opYDqjBJetU0NQQUZnM3CC5z2R61NOsA
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWw6WME2AAAEAwBH
MEUCIEtyhvqDKBLVPVRbTsftENFG5+wBMXEp/BoJaJ0qAZz3AiEA3iqO3u7kHX//
lYn9E7OUvjGxmxoomizXhaDEeaei7aAwDQYJKoZIhvcNAQELBQADggEBAJCeaXgz
Mf9GHk1vblzl9o3bKzNQHWqh4dY/fsCQlB1cWjVrsJdHifbSOyjPx0FouuxAkW5D
l6BtXOozqri+tPeDsEWltkobIkIg9hSCXV0yxjdQLY8xin4IpTHCa58WyZ6YgJ8X
Z4ppxijiKs3i8FnoeOJcV5Z1S2grz6QdziGe43EtJGOnL7wjVu1+RKJrrlWKRX/Y
1aMJz0NoDj/OsjBpy2La0bsEClrU5tK4AcJfvK/THD0EVazdQdhp8JHN9H9ZfALZ
7tjBp0QEHMQN2kwzR6RvQ50A1ZHdGKdTfocpaDLTV4WkBwYcKjkXEpT71ORmap5X
mcehcggC97Hbg2s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322976356614850227854705569702757492265822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:49:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.selvazzanodentro.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905358705854402126802398108848563599102037727734593287837574653879354835889935829574340354561523195315692504119557904557600370647102885980315989809752873827708685833538696974446564804120720580022225221102063305596654082496497019951521334781198949762320585592502924209828175045245166381639185049084688972619917946927628465001241352894986479582216190796731217848647829144212543770323627601720195965470093018955449299384884740068552143008063421015143807484380115184872004509739738212043614480840450143240790437563090827632157583873133386395534850767708242337943780972221115794623072868680498250489349009194075466099437488709381429327789688848585120250550955915441876408884114055086830362969324296992278644008682664495880452998041470247294568959706263526788655140701901833231847589479147122555410332176443427001531193853640983984504704631064033435081196400329115222421883541617943648333654725177300700965682109621159187114091613958450440838761031468640086874610431819226287056318327938385291876003747361173466025451627526022545093048343714003255824308527296644283390364241690585520786079756568392486602110447830965859835204723955582916664973000638085632551991933763242290710980375596276070419264253320505552513793437038534060509642619447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f078b53140c9fc5a88f057e5f91bf97925e9d9f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selvazzanodentro.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c3a58bfe3000004030046304402206f19ab36fbb605ab340d07183f2b6f32b26c39e75e071cd4602154ab0473278902200416b3e43f671dc73fa29603aa30497ad534350414667337082e73d91eb534eb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3a58c136000004030047304502204b7286fa832812d53d545b4ec7ed10d146e7ec01317129fc1a09689d2a019cf7022100de2a8edeeee41d7fff9589fd13b394be31b19b1a289a2cd785a0c479a7a2eda0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00909e69783331ff461e4d6f6e5ce5f68ddb2b33501d6aa1e1d63f7ec090941d5c5a356bb0974789f6d23b28cfc74168baec40916e4397a06d5cea33aab8beb4f783b045a5b64a1b224220f614825d5d32c637502d8f318a7e08a531c26b9f16c99e98809f17678a69c628e22acde2f059e878e25c5796754b682bcfa41dce219ee3712d2463a72fbc2356ed7e44a26bae558a457fd8d5a309cf43680e3fceb23069cb62dad1bb040a5ad4e6d2b801c25fbcafd31c3d0455acdd41d869f091cdf47f597c02d9eed8c1a744041cc40dda4c3347a46f439d00d591dd18a7537e87296832d35785a407061c2a39171294fbd4e4666a9e5799c7a1720802f7b1db836b