www.carpignanosalentino.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:18:24:50:d0:ba:d2:84:1c:83:ee:c6:69:1d:26:ab:05:7f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.carpignanosalentino.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:18:24:50:d0:ba:d2:84:1c:83:ee:c6:69:1d:26:ab:05:7fSerial Number (int): 269551906426522990172758785697753917490559
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:f9:3d:6b:5f:35:f2:42:3f:0e:3d:97:8c:66:79:e9:2c:ff:6b:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 21:50:10:1d:08:38:3b:f2:7d:54:3b:11:01:5a:42:4e:3f:98:04:ec
Fingerprint (sha256): 38:67:70:1f:81:34:8a:46:d8:f5:6b:4c:18:d9:7e:ef:7b:0d:30:5c:6f:f6:c9:8d:b8:81:04:b1:80:b9:3b:a9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.carpignanosalentino.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.carpignanosalentino.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.carpignanosalentino.org
Other certificates including the domain name carpignanosalentino.org
(limited to 100 certificates)
www.carpignanosalentino.org
www.carpignanosalentino.org
www.carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
chicagobirthlaw.org
carpignanosalentino.org
torricella.org
carpignanosalentino.org
havit.exposed
www.carpignanosalentino.org
tiggiano.org
www.carpignanosalentino.org
www.carpignanosalentino.org
www.carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
carpignanosalentino.org
chicagobirthlaw.org
carpignanosalentino.org
torricella.org
carpignanosalentino.org
havit.exposed
www.carpignanosalentino.org
tiggiano.org
www.carpignanosalentino.org
Certificate
The complete raw certificate details for www.carpignanosalentino.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgISAxgkUNC60oQcg+7GaR0mqwV/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwOTU0MzFaFw0x OTA4MjYwOTU0MzFaMCYxJDAiBgNVBAMTG3d3dy5jYXJwaWduYW5vc2FsZW50aW5v Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANnxhg94IsYKmMAq spFtxq2tBIKtwpBw0aqBGGZ5URNGPFqtdOKd8IsgqTD9cRVn1JL+rLybnMYO5kNx ncO8ExuYELysbkogaIE0h6kB8gKzvCVbY+Ihh3X7Ps0ffnqURewMdtV/5saF5XxH 6zLhcWMR7+PMXDLRx0Q/t9gu1NpwVn89EnCNlKmEgpk+/RYTa96ECmd6su+7HJPk YR+h5XNQP2rbXHD0Sfr/JA0q6p/9v/+0v9swV/gInkkRWSqZYzP6XbSQBuAz/D4Y yc+zUjDxkCV997ZpQv8RExvzrIbW92b1cWPiQuL7cf24TMIeUlQtUelaBsmXTrx5 m7uqyEhLFPpYqs/fl6bH7x1FTuBQi5Gxer2vK2+9G69WPriuy7UMcE+tSAa3rR51 KIijevVmddDFgLdDztoNd71TvEmefA/zBG4eu8VvHEPw9wl3YgEk9UJpbYqylje8 gS9BHUJtFtihyACeNP9K4qReeEsAWGZyhh4t9tNeqbuE3MhAM/pPbZVGo6ex5e4+ TDf2WHps5/0FAvlrsjx+0f3MP65+yKNxMeZrAxpBdEaRu+qAMk2o6tRqrSM8hqd5 PlgqvvOeB/WtzkRxefzXlX03t+o7vAmXbj+FqClwUUWIiQrnWHrdqghpK51FeBT3 2Y99LeyQNHITQK9DgxVkBiuk/UDxAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFPX5PWtfNfJCPw49l4xmeeks/2spMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3 LmNhcnBpZ25hbm9zYWxlbnRpbm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9C cMK//V5CIAjGNzV55hB7zFYAAAFq/hPN0QAABAMARjBEAiB8GObYnVnW2WTC7nQn FAd4/4IUmHnOysbyR/4lpDlWFAIgXWwwC8YGk9rpEadXzcvMPtCIHpE5PhsIbYYJ 6Ky3HUIAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWr+E83n AAAEAwBIMEYCIQC9JKyL4HfCsEzEdaQ/BVyQOfiTbEMCgaW+ajxEKTSj0QIhAPhs SE0wDzykOCKkbbZlOIxGpMNVA5WxV+/0SXLz7CMKMA0GCSqGSIb3DQEBCwUAA4IB AQBAYMYbNsm6VV/5Yu/QcolXQhIgWrkOcGklhxGzkpz4nXiUbZ4gA3NekR1uasWS Uw1eZhhdy2JA3xKaEaI905tlAltbkmfahfuoP5a8EQlMC49opbkUsAW608T/prqr QOnXDP3+v90aN0eBys1iqHseU8Xl7kGwI5ssAFLZC7byJdsvVyM0HbJMv44Ln8Hq Glqzx0csgcEUvmGUZLuYGUfQlJ0sdiyhcQ2KXP0ql09K/CWvGjaYVwfSucrYmX8X Z4UJGymEpgMy1d+5+cBucXjf0TNkG7zTR5AcPb+RTAg2WEH8qmy5po5TliNDKqLF ed7rN90CFGefofjjdzU1q/zD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2fGGD3gixgqYwCqykW3G ra0Egq3CkHDRqoEYZnlRE0Y8Wq104p3wiyCpMP1xFWfUkv6svJucxg7mQ3Gdw7wT G5gQvKxuSiBogTSHqQHyArO8JVtj4iGHdfs+zR9+epRF7Ax21X/mxoXlfEfrMuFx YxHv48xcMtHHRD+32C7U2nBWfz0ScI2UqYSCmT79FhNr3oQKZ3qy77sck+RhH6Hl c1A/attccPRJ+v8kDSrqn/2//7S/2zBX+AieSRFZKpljM/pdtJAG4DP8PhjJz7NS MPGQJX33tmlC/xETG/Oshtb3ZvVxY+JC4vtx/bhMwh5SVC1R6VoGyZdOvHmbu6rI SEsU+liqz9+XpsfvHUVO4FCLkbF6va8rb70br1Y+uK7LtQxwT61IBretHnUoiKN6 9WZ10MWAt0PO2g13vVO8SZ58D/MEbh67xW8cQ/D3CXdiAST1QmltirKWN7yBL0Ed Qm0W2KHIAJ40/0ripF54SwBYZnKGHi32016pu4TcyEAz+k9tlUajp7Hl7j5MN/ZY emzn/QUC+WuyPH7R/cw/rn7Io3Ex5msDGkF0RpG76oAyTajq1GqtIzyGp3k+WCq+ 854H9a3ORHF5/NeVfTe36ju8CZduP4WoKXBRRYiJCudYet2qCGkrnUV4FPfZj30t 7JA0chNAr0ODFWQGK6T9QPECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269551906426522990172758785697753917490559 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:54:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:54:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carpignanosalentino.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889131710502766178212362829514613256273666321762770121423489511124622138274623070503980386230919442797722965168661106627644807405979081695181485081884828601547112993860567862988519359629599083595559916599835800881706879634155835361459190005965088249800521955974831318113496414892180355096857898295442929128863345336603000181736327147363323107656027986623070905174668902027533481468520077707064580096532842162666656783266008047245787415061344223038789768041083574160105420764708857612905001235997739578263939256517015593597043039453652842359254047581466015722216561794163695945445985550681002989795983391062782734111455386243039637113161797598274365745602713919850656513795457202079130191704523043663464944876003182435123122158612549748581563735256512897291339329529418769688657901606735425050391634510902876251213019197958851311204834041378618046285316329062481144244941034541971999913104470693372066974843980914438020726732127726487301627147664089570995441998340189158202826574427600280287955201356898795936462793695768810372244518753013367169570418644050134960775411228372451438655912331318225340979198981336965731015635981395218115836417085921628265630832770349388563424059299312842269679325610526948422865580083967002521720668401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f5f93d6b5f35f2423f0e3d978c6679e92cff6b29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpignanosalentino.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe13cdd1000004030046304402207c18e6d89d59d6d964c2ee7427140778ff82149879cecac6f247fe25a439561402205d6c300bc60693dae911a757cdcbcc3ed0881e91393e1b086d8609e8acb71d42007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afe13cde70000040300483046022100bd24ac8be077c2b04cc475a43f055c9039f8936c430281a5be6a3c442934a3d1022100f86c484d300f3ca43822a46db665388c46a4c3550395b157eff44972f3ec230a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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