www.portoempedocle.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:26:75:15:b8:6f:c9:9a:f2:6e:02:cc:8c:3f:ef:d1:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.portoempedocle.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:26:75:15:b8:6f:c9:9a:f2:6e:02:cc:8c:3f:ef:d1:bc
Serial Number (int): 321277672976481365028634618566107234030012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:1f:e7:fd:40:80:cc:8c:5a:b1:aa:0e:6c:59:a7:3e:0b:64:21:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:ca:28:4b:6e:6e:d1:3f:9c:14:b1:48:90:9b:14:fa:49:f7:ff:b3
Fingerprint (sha256): 39:b8:f5:ea:f0:25:f9:a3:b2:8b:f6:f0:63:55:e3:e8:38:9b:ad:4f:2a:77:f2:8c:99:59:13:9b:f7:dc:bd:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.portoempedocle.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.portoempedocle.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.portoempedocle.org

Other certificates including the domain name portoempedocle.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.portoempedocle.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321277672976481365028634618566107234030012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:31:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:31:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.portoempedocle.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835709223073156050629192953787540374698238760615181950413814686709175826438159946080769396193736905338464684354968599426109190538196742201361048802779898739015752909761875096132002037315320483712449850233892885245816000732879162296563640205630226564596316323834486117745192553748905033709117343300263765796078121537536991480496213547100612665896127360245057342181691434563511452079101773199642708015952523744153573031746461621175551391640728500183712113685005018265271312082146799728422026726974904688340249067860274075094233826211673240867615890541839032685591698589805371295125671691812393930993419948620089151260210220691152662906410958040141992110587145554325223792267351554588635231880669369446029394861294800441919127044440029779869823771232045366091038511042287461953530241968685807520690043214863085971110787069780156751251683056632400936975561272031863505166339593394013819989882954206605932731442804190444894453207928291922273080263370056331629071070396833087508695832489865559530485939333826411611923986606842918307716480545824615651396163952867413617042645895161968491815615689904364457164515857249030362393213797604007430593406121897634773614600394694882987466296630327259875400091414964696652641197198419313689002021579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b1fe7fd4080cc8c5ab1aa0e6c59a73e0b64218f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portoempedocle.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3a4820210000040300473045022100f9db99ce228d0c63f819a3807d57018d3d9b8e97ad2e504d396fb355764ff0480220719c75cce406d3c2a89b45d9aa63b463c629b395a6036e38764d1f4cb1680199007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a4820120000040300463044022057c7b4898f41d1bd05bafc2c542d566ab183cf57754f4882fe9e045d9c0494cf022018e195a6d47f239c37daf96c02af79a474ab64aef92a5f714a815173a8dcdc29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0082aae0627c0daf1ea6c9fcdf1c4754d164681a3dcd7f7f5c4ba6b693415a9d868a04560e4ca59a2a952d415def7ebd39ba9615d2b0414a6880f6e9ac29d1002870afea68dabb1b4637b3efea96df348161d65a4e3d55a0b665ef134da2080d4f1d0e9d49bb5305540b064e9fdec278e9b7fd6e1e37286bc714d771b53a6e8ad7614d889b342a3cc82ef36724b0cbe687c4f9278ff9d545a39400978768d13939306a62d139285b0d29fac09581bce7bc62135ed983fa0f0dc0fb583e2da1760a73928f7f0d4ee7d947ffd5a24c3c6c3480d18ea5ed0f3ef7ae273d32ba7bbbcee1889feeb31b7dd1a0baf7dfa4ae4f44ad6ca78e522e22b9fed339606d76e662