www.torresantasusanna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9b:c4:2f:b9:5e:de:7c:ec:98:20:48:53:9d:ac:15:d8:b7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.torresantasusanna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:c4:2f:b9:5e:de:7c:ec:98:20:48:53:9d:ac:15:d8:b7
Serial Number (int): 401453687084674723719472917520090647615671
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:d5:85:38:c7:1b:14:7e:78:ba:e1:5d:af:2e:0b:7d:f1:9a:ef:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:58:c7:3d:bd:d1:c6:25:a1:2e:98:64:9d:1d:2d:c3:3a:e1:87:48
Fingerprint (sha256): 37:e2:d4:8c:9c:23:e7:b4:a4:6e:c2:6d:e9:a8:79:f5:c3:fe:53:97:dc:a0:90:d8:01:7c:35:02:49:64:ee:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.torresantasusanna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.torresantasusanna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.torresantasusanna.org

Other certificates including the domain name torresantasusanna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.torresantasusanna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401453687084674723719472917520090647615671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 23:52:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 23:52:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.torresantasusanna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720285931039560378533526216637472936774381977032156551156461171518877456557573395462824274578149139451541887617553017570721054757561994534810636109391859383308406622502826755514011413014590574089824047451350521538722069656408598321300960801331914223097398027832093193842718259418368746086700249438685418685518065694259955274400321645006686538773788551765934119050891539140618515464728134046656716662804375295581975022663741613476727608731961354037119301971962691907296329348539551073448406423161643266713438488284218846478156205187581563968078194289129144758728427529455039997696805649408669690027149592771858520056448347609960014647362281357727025871638268658276772868662454723307737669634902898812328660057611150609085356832832491702014313801817128916832285403161275052548367921783305528311323407230395767583605945214592597893537668729449862367579423138208492684841182270415604663659355800308027814053145784046829331556095875009763146790133050344112723885941114508790117601577540545404302581592880250248147140730976193186208586066554934225759972353795367621022686004438715277192089101791163959052468922933074663971173189857955355245051948994666327824527738471010590035210816963988641158616349343614888894898872862845370794892274999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcd58538c71b147e78bae15daf2e0b7df19aefba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torresantasusanna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017147d33b970000040300473045022100ad391a502183f77643467e239ca03bc483bf1f3273efad593ed4f8803426c8cf02200c87e836c74c14223f30f63f4d86de11b3fdcba781f39d953899c292d155f090007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017147d33b860000040300473045022100d17d7f8c08dac540a6e7ec653dc01839ba9ff5eb30f2fe47276e554dd0c27f44022019c595eee6531da0619d6748a5b5b5e023fb449892356adca32bd2aef8a3d5f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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