www.roccabascerana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4c:4a:29:e4:d8:ee:15:13:66:80:ed:ec:f9:9b:3c:88:e5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.roccabascerana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:4a:29:e4:d8:ee:15:13:66:80:ed:ec:f9:9b:3c:88:e5
Serial Number (int): 374409184010467949159297186673707993303269
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:93:38:34:96:89:aa:a9:58:5a:7b:0e:4d:29:34:66:72:23:ed:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:e3:81:fa:39:50:92:42:3a:e3:2c:82:4a:b5:f1:29:2a:0d:83:e2
Fingerprint (sha256): 3a:94:dc:0c:89:a8:61:4e:4a:71:99:51:a1:e9:aa:51:0d:3c:03:08:56:dc:fb:57:f7:36:84:4b:ee:61:e0:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.roccabascerana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.roccabascerana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.roccabascerana.com

Other certificates including the domain name roccabascerana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.roccabascerana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsAdFNOgm5y90WA9dUfMU
Uf2M0UGLWEHSIWHbfEMi+e6rGOcwl39rz4WQjtA9fLEFCO+pSjwj92+tD01Pvb3l
TyKXUCAXUo46ou9j9wjU719XBTy8GegnYJjkD2v6S2BT3hE9Eo0cqK+kAQko7khb
+gfD621x+4iYGzF9w63t3di2xPeLZJk6VY/rrpUXItLojN77n7nOJe2lRn3WVcBO
ySBoFnWadGrm+YL9TQlKpE+nsMIUmXQ9NKtDJ1scJgDRo+pId54xJAYaappTTlE+
EZ7odxg+B66tblc+dM5KUNaCJ14h098GJgGgygF6T4ujiLPVTaf0h74oiD5MKb+l
SOHK6qds0V7JCqyefg7JzZHjN8epeMWXVwD3+O2CoWrnYegaikUzlth05V+bLQyT
97h9/y9WN30LU/8vvrb1Dv8Ml4y2a0pFvjuXWY8qIWSE6CDbr9DLXie6Dy7buzZQ
bPx9uhcV41BfbgiBq52bt0q4W9bQbTfDn/Y9/ol39JdYLVZp/5cC2VkFvUnFOUGP
xaXSloqQY8669GDn9xmwvOYM1JxeQB42czS/OBLs/NC3zOVYhpScA79knvColafm
kBr8xz9Ka7H4wotyJRAYi3rT9O3/junLPBkDkE4h4uOg0+bveK9KmFwLc2Suifoe
wIciU61Cu0If0576ENZJ1psCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374409184010467949159297186673707993303269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 07:05:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 07:05:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.roccabascerana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718133216883710409078884306610387561468228981762315184878151884794677647540119215409106903404737092224317370894693975448721608137750565132785666689199991978953388445972841478561274671615554220291480145482170695095488555371378429035639345580382693173551144563293401258005096633269030914443652338965211359855086208929843023366882114723305736227960576418474426795640314944382445138201001166121974551341293151966344154586609740715903521130060022565956290640674338537892184403699621025131781503957154889175777642912116784245044735961761523388958178294193264510419989083575351098866207916610108155310202796344069018101390526468956566760409494106968896453511651217520282798992071675963320742780974095502796055760158065324289721781656241806424462625897992787774863414342483684324663167426956777852742346736566651190783782106534400174678921237178972369778771046140419998306013095509313305689428412258423221351565706806960688573450335569482079889181510879058801003804222804221611219425993866496888853380082037453191102050810716938573126328605044360170842455681164676982888069575449704808157779951190644729686089626146806221459772013023274614406938371820953721146878026033820434261193291956896930320280724237673201426100094960049875506040526491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff9338349689aaa9585a7b0e4d2934667223ed4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roccabascerana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d76e75d5c0000040300483046022100c1ed80d93434d05f857085cec5d6b7d786fba8a0f7c47394156f549512d37c24022100e2add7610bac18c97347644ff597d0474afc645ab011e4413bf96e475c144d25007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d76e75f450000040300463044022045c3c24441192117791ed6d8b60abff06cd1a654e8628811417ab24ba4a4da940220276af3f633dfbe0a6d217de2f5c46808d391f2b336ee3cd4da6c169548eae039
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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