contrattoazienda.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6b:38:52:39:90:6f:c8:5e:2d:89:6d:23:79:c6:29:45:41 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=contrattoazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:38:52:39:90:6f:c8:5e:2d:89:6d:23:79:c6:29:45:41
Serial Number (int): 384934220691228555198020660191556746691905
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:ac:f8:f6:9e:de:cb:40:e9:f5:14:9c:4f:3b:26:bb:e6:0e:32:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:12:ab:86:a4:1e:31:79:f3:ed:53:38:5d:a8:8a:4c:fe:5e:98:c2
Fingerprint (sha256): 37:96:a4:0e:04:66:6d:4b:26:1a:1b:b0:de:69:59:8f:e9:69:34:8e:3e:92:9a:c5:3e:59:99:87:00:71:8c:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate contrattoazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contrattoazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

contrattoazienda.com

Other certificates including the domain name contrattoazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for contrattoazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISBGs4UjmQb8heLYltI3nGKUVBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjYwNDI1NTdaFw0yNDAzMjUwNDI1NTZaMB8xHTAbBgNVBAMT
FGNvbnRyYXR0b2F6aWVuZGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAnwaGH548BsnaW4xkbhyf/MI1GkGrAW7pXZ3liP9a9cLHngivmnm5pD+C
/MhtBF5hlB8obRcA0mdCzRL9pYdwxaR7tJYH09ddYll8rtMAECVWcbm0op3KwZmw
0yakOVIr/0EySmCqjP7qBKnmf+r34lDKisqZuHEFJJWTT0vc/4xkhfc2qnhM9PaQ
yMTGudRjKqzNrPfQwqfr462jmdDl2HtRb5ypikSRMvpODoIgMtUapAdUSpfCKHK2
hALCUN+WJYQLpJcQuS73Lpo59xZPovlB/OWiYof2zuSdBuYln2/P5pjooJMy5/Wz
lVRHYj7b9gk6xofW5dPhuvbn5mWPTSMnyXA6qBt4G8uaqmu/bDNJv74476/x2nll
N3lo3PUhMbanLT+6VKTILeOFZK03tgLZF3DS+PSyG1ortZrIB06u1bbo5zTch0pu
TwsUEhJCKHy0SUuE+gcYBkr5T9RAfGs47fJoZQj8q4fiPCSMctl7nUa+nLTXnrH7
mvxuVQIGtNw9dLolRjN6p3Bo6wDzqOMcFYTUCUK0wwOXLJa+rItdgM4hJ2Wk5jpe
QMDsZqS3qFpw/Kd4Iucphd3hG21REkS5m5ncHd/fP5xamMW8N/Dxvcp2uGQT8C9C
AQV3je0GlLN0BaiAzGCO6GhqIfnZ11igrLchlsCGBS/+ONvnTlkCAwEAAaOCAhYw
ggISMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIKz49p7ey0Dp9RScTzsmu+YOMrEw
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIUY29udHJhdHRvYXpp
ZW5kYS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYykljiy
AAAEAwBHMEUCIQDER+BA3+NvRaIJAcipqi/tCYYFI5zX1wEUJc0lkSzvTgIgOVb+
eNp9VU/SMsHCa9c5nukeVOanXRxoO4g18Hccu1UAdgBIsONr2qZHNA/lagL6nTDr
HFIBy1bdLIHZu7+rOdiEcwAAAYykljiVAAAEAwBHMEUCIE8LiFANa9hrBC4uFFGF
WQaSy4zV35vgduOMtM1YmYrKAiEAoQMir4QGCBklFJGJTUWttSBptb5qCKbbbt67
TSiS58IwDQYJKoZIhvcNAQELBQADggEBAFjSsiaiUNWs19hMupuB6hkxfZBYYxlS
T44qEky8KG+Cqn5onQds7MtGMxJKblhf74E7AiHasxeGaGwWtYE22ebg67eAUk7d
T3cKIK24qXvBUiMijhWhO1PFjdkLe0GySlAfVL/P4kWsYbmTSHRQTNW+eQTWgbjE
7wRA92GjZuwtYiIrOsYUne9An1rpcUUngeWBu3B0KwLJpIR3s6qpeHYv4Pl2PvJ+
h1BC3DdYAig/2sgQcNjzetCQaIWgxJLQmU8z0wAdasOo7OT0RvmuVlBkVhvv3Rr4
bMzUzd3ugy0ZFu5dVAr2vH8QG31ztLj76I1HX2beP6GRqEeUgrrSfc4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384934220691228555198020660191556746691905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 04:25:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 04:25:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contrattoazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648767372718873842886423647597506963423821692331174946460225805665777556183809121894148830477904814152642477801679103627919427094579912741702235369992243468836472112123748040453135119808791233010633782154479501123966785985922043593826717942821325758044755928873526588736363535032629445184965976957289925796490191004669758971253381155077875015530598591145894344670031957870359871470973077625998142785395204524016240892506909060518705266115404836728232840493296919272047740414148766990721222993953683906546366573474395697515012948639867496583333102289047120988450035839249110062527400017224733867032489414990104473258208981723738861082406882369227664771251980963174748325923855862908354495069575235440308137701340538774933714268278707962362424614579227167794947287381917453529415596133655220582438328696073252993965208715704402522391638706315027995653525945728037149395590055073686723829736644439600540204957089738519807440269276273995251314399282582323542919403142988185208144206055380616146459298288002263621961373378300910210475022587207705963589746357809040357615735252561805868479025743487926571037513129250964868944744577472078122594547381124868960462255447006244333367452863937662524053441161943326654577316492746132783725235801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20acf8f69edecb40e9f5149c4f3b26bbe60e32b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrattoazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca49638b20000040300473045022100c447e040dfe36f45a20901c8a9aa2fed098605239cd7d7011425cd25912cef4e02203956fe78da7d554fd232c1c26bd7399ee91e54e6a75d1c683b8835f0771cbb5500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca4963895000004030047304502204f0b88500d6bd86b042e2e145185590692cb8cd5df9be076e38cb4cd58998aca022100a10322af84060819251491894d45adb52069b5be6a08a6db6edebb4d2892e7c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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