www.carpignanosalentino.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:24:50:d0:ba:d2:84:1c:83:ee:c6:69:1d:26:ab:05:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.carpignanosalentino.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:24:50:d0:ba:d2:84:1c:83:ee:c6:69:1d:26:ab:05:7f
Serial Number (int): 269551906426522990172758785697753917490559
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:f9:3d:6b:5f:35:f2:42:3f:0e:3d:97:8c:66:79:e9:2c:ff:6b:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:50:10:1d:08:38:3b:f2:7d:54:3b:11:01:5a:42:4e:3f:98:04:ec
Fingerprint (sha256): 38:67:70:1f:81:34:8a:46:d8:f5:6b:4c:18:d9:7e:ef:7b:0d:30:5c:6f:f6:c9:8d:b8:81:04:b1:80:b9:3b:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.carpignanosalentino.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.carpignanosalentino.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.carpignanosalentino.org

Other certificates including the domain name carpignanosalentino.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.carpignanosalentino.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269551906426522990172758785697753917490559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:54:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:54:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carpignanosalentino.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889131710502766178212362829514613256273666321762770121423489511124622138274623070503980386230919442797722965168661106627644807405979081695181485081884828601547112993860567862988519359629599083595559916599835800881706879634155835361459190005965088249800521955974831318113496414892180355096857898295442929128863345336603000181736327147363323107656027986623070905174668902027533481468520077707064580096532842162666656783266008047245787415061344223038789768041083574160105420764708857612905001235997739578263939256517015593597043039453652842359254047581466015722216561794163695945445985550681002989795983391062782734111455386243039637113161797598274365745602713919850656513795457202079130191704523043663464944876003182435123122158612549748581563735256512897291339329529418769688657901606735425050391634510902876251213019197958851311204834041378618046285316329062481144244941034541971999913104470693372066974843980914438020726732127726487301627147664089570995441998340189158202826574427600280287955201356898795936462793695768810372244518753013367169570418644050134960775411228372451438655912331318225340979198981336965731015635981395218115836417085921628265630832770349388563424059299312842269679325610526948422865580083967002521720668401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5f93d6b5f35f2423f0e3d978c6679e92cff6b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpignanosalentino.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afe13cdd1000004030046304402207c18e6d89d59d6d964c2ee7427140778ff82149879cecac6f247fe25a439561402205d6c300bc60693dae911a757cdcbcc3ed0881e91393e1b086d8609e8acb71d42007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afe13cde70000040300483046022100bd24ac8be077c2b04cc475a43f055c9039f8936c430281a5be6a3c442934a3d1022100f86c484d300f3ca43822a46db665388c46a4c3550395b157eff44972f3ec230a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004060c61b36c9ba555ff962efd07289574212205ab90e7069258711b3929cf89d78946d9e2003735e911d6e6ac592530d5e66185dcb6240df129a11a23dd39b65025b5b9267da85fba83f96bc11094c0b8f68a5b914b005bad3c4ffa6baab40e9d70cfdfebfdd1a374781cacd62a87b1e53c5e5ee41b0239b2c0052d90bb6f225db2f5723341db24cbf8e0b9fc1ea1a5ab3c7472c81c114be619464bb981947d0949d2c762ca1710d8a5cfd2a974f4afc25af1a36985707d2b9cad8997f176785091b2984a60332d5dfb9f9c06e7178dfd133641bbcd347901c3dbf914c08365841fcaa6cb9a68e539623432aa2c579deeb37dd0214679fa1f8e3773535abfcc3