contrattoazienda.com
Issued by R3
About this certificate
This digital certificate with serial number 04:6b:38:52:39:90:6f:c8:5e:2d:89:6d:23:79:c6:29:45:41 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=contrattoazienda.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6b:38:52:39:90:6f:c8:5e:2d:89:6d:23:79:c6:29:45:41Serial Number (int): 384934220691228555198020660191556746691905
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 20:ac:f8:f6:9e:de:cb:40:e9:f5:14:9c:4f:3b:26:bb:e6:0e:32:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ae:12:ab:86:a4:1e:31:79:f3:ed:53:38:5d:a8:8a:4c:fe:5e:98:c2
Fingerprint (sha256): 37:96:a4:0e:04:66:6d:4b:26:1a:1b:b0:de:69:59:8f:e9:69:34:8e:3e:92:9a:c5:3e:59:99:87:00:71:8c:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate contrattoazienda.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for contrattoazienda.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
contrattoazienda.com
Other certificates including the domain name contrattoazienda.com
(limited to 100 certificates)
www.contrattoazienda.com
contrattoazienda.com
www.contrattoazienda.com
926.me
contrattoazienda.com
contrattoazienda.com
www.contrattoazienda.com
www.chamberlain.org
www.contrattoazienda.com
www.topical.org
contrattoazienda.com
myphamplaza.com
www.pianostrategico.com
contrattoazienda.com
contrattoazienda.com
www.contrattoazienda.com
contrattoazienda.com
contrattoazienda.com
www.bachecaitalia.com
contrattoazienda.com
www.contrattoazienda.com
926.me
contrattoazienda.com
contrattoazienda.com
www.contrattoazienda.com
www.chamberlain.org
www.contrattoazienda.com
www.topical.org
contrattoazienda.com
myphamplaza.com
www.pianostrategico.com
contrattoazienda.com
contrattoazienda.com
www.contrattoazienda.com
contrattoazienda.com
contrattoazienda.com
www.bachecaitalia.com
Certificate
The complete raw certificate details for contrattoazienda.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISBGs4UjmQb8heLYltI3nGKUVBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjYwNDI1NTdaFw0yNDAzMjUwNDI1NTZaMB8xHTAbBgNVBAMT FGNvbnRyYXR0b2F6aWVuZGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAnwaGH548BsnaW4xkbhyf/MI1GkGrAW7pXZ3liP9a9cLHngivmnm5pD+C /MhtBF5hlB8obRcA0mdCzRL9pYdwxaR7tJYH09ddYll8rtMAECVWcbm0op3KwZmw 0yakOVIr/0EySmCqjP7qBKnmf+r34lDKisqZuHEFJJWTT0vc/4xkhfc2qnhM9PaQ yMTGudRjKqzNrPfQwqfr462jmdDl2HtRb5ypikSRMvpODoIgMtUapAdUSpfCKHK2 hALCUN+WJYQLpJcQuS73Lpo59xZPovlB/OWiYof2zuSdBuYln2/P5pjooJMy5/Wz lVRHYj7b9gk6xofW5dPhuvbn5mWPTSMnyXA6qBt4G8uaqmu/bDNJv74476/x2nll N3lo3PUhMbanLT+6VKTILeOFZK03tgLZF3DS+PSyG1ortZrIB06u1bbo5zTch0pu TwsUEhJCKHy0SUuE+gcYBkr5T9RAfGs47fJoZQj8q4fiPCSMctl7nUa+nLTXnrH7 mvxuVQIGtNw9dLolRjN6p3Bo6wDzqOMcFYTUCUK0wwOXLJa+rItdgM4hJ2Wk5jpe QMDsZqS3qFpw/Kd4Iucphd3hG21REkS5m5ncHd/fP5xamMW8N/Dxvcp2uGQT8C9C AQV3je0GlLN0BaiAzGCO6GhqIfnZ11igrLchlsCGBS/+ONvnTlkCAwEAAaOCAhYw ggISMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIKz49p7ey0Dp9RScTzsmu+YOMrEw HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIUY29udHJhdHRvYXpp ZW5kYS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYykljiy AAAEAwBHMEUCIQDER+BA3+NvRaIJAcipqi/tCYYFI5zX1wEUJc0lkSzvTgIgOVb+ eNp9VU/SMsHCa9c5nukeVOanXRxoO4g18Hccu1UAdgBIsONr2qZHNA/lagL6nTDr HFIBy1bdLIHZu7+rOdiEcwAAAYykljiVAAAEAwBHMEUCIE8LiFANa9hrBC4uFFGF WQaSy4zV35vgduOMtM1YmYrKAiEAoQMir4QGCBklFJGJTUWttSBptb5qCKbbbt67 TSiS58IwDQYJKoZIhvcNAQELBQADggEBAFjSsiaiUNWs19hMupuB6hkxfZBYYxlS T44qEky8KG+Cqn5onQds7MtGMxJKblhf74E7AiHasxeGaGwWtYE22ebg67eAUk7d T3cKIK24qXvBUiMijhWhO1PFjdkLe0GySlAfVL/P4kWsYbmTSHRQTNW+eQTWgbjE 7wRA92GjZuwtYiIrOsYUne9An1rpcUUngeWBu3B0KwLJpIR3s6qpeHYv4Pl2PvJ+ h1BC3DdYAig/2sgQcNjzetCQaIWgxJLQmU8z0wAdasOo7OT0RvmuVlBkVhvv3Rr4 bMzUzd3ugy0ZFu5dVAr2vH8QG31ztLj76I1HX2beP6GRqEeUgrrSfc4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnwaGH548BsnaW4xkbhyf /MI1GkGrAW7pXZ3liP9a9cLHngivmnm5pD+C/MhtBF5hlB8obRcA0mdCzRL9pYdw xaR7tJYH09ddYll8rtMAECVWcbm0op3KwZmw0yakOVIr/0EySmCqjP7qBKnmf+r3 4lDKisqZuHEFJJWTT0vc/4xkhfc2qnhM9PaQyMTGudRjKqzNrPfQwqfr462jmdDl 2HtRb5ypikSRMvpODoIgMtUapAdUSpfCKHK2hALCUN+WJYQLpJcQuS73Lpo59xZP ovlB/OWiYof2zuSdBuYln2/P5pjooJMy5/WzlVRHYj7b9gk6xofW5dPhuvbn5mWP TSMnyXA6qBt4G8uaqmu/bDNJv74476/x2nllN3lo3PUhMbanLT+6VKTILeOFZK03 tgLZF3DS+PSyG1ortZrIB06u1bbo5zTch0puTwsUEhJCKHy0SUuE+gcYBkr5T9RA fGs47fJoZQj8q4fiPCSMctl7nUa+nLTXnrH7mvxuVQIGtNw9dLolRjN6p3Bo6wDz qOMcFYTUCUK0wwOXLJa+rItdgM4hJ2Wk5jpeQMDsZqS3qFpw/Kd4Iucphd3hG21R EkS5m5ncHd/fP5xamMW8N/Dxvcp2uGQT8C9CAQV3je0GlLN0BaiAzGCO6GhqIfnZ 11igrLchlsCGBS/+ONvnTlkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 384934220691228555198020660191556746691905 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 04:25:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 04:25:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contrattoazienda.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648767372718873842886423647597506963423821692331174946460225805665777556183809121894148830477904814152642477801679103627919427094579912741702235369992243468836472112123748040453135119808791233010633782154479501123966785985922043593826717942821325758044755928873526588736363535032629445184965976957289925796490191004669758971253381155077875015530598591145894344670031957870359871470973077625998142785395204524016240892506909060518705266115404836728232840493296919272047740414148766990721222993953683906546366573474395697515012948639867496583333102289047120988450035839249110062527400017224733867032489414990104473258208981723738861082406882369227664771251980963174748325923855862908354495069575235440308137701340538774933714268278707962362424614579227167794947287381917453529415596133655220582438328696073252993965208715704402522391638706315027995653525945728037149395590055073686723829736644439600540204957089738519807440269276273995251314399282582323542919403142988185208144206055380616146459298288002263621961373378300910210475022587207705963589746357809040357615735252561805868479025743487926571037513129250964868944744577472078122594547381124868960462255447006244333367452863937662524053441161943326654577316492746132783725235801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 20acf8f69edecb40e9f5149c4f3b26bbe60e32b1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrattoazienda.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca49638b20000040300473045022100c447e040dfe36f45a20901c8a9aa2fed098605239cd7d7011425cd25912cef4e02203956fe78da7d554fd232c1c26bd7399ee91e54e6a75d1c683b8835f0771cbb5500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca4963895000004030047304502204f0b88500d6bd86b042e2e145185590692cb8cd5df9be076e38cb4cd58998aca022100a10322af84060819251491894d45adb52069b5be6a08a6db6edebb4d2892e7c2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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