www.sangiovannivaldarno.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:45:93:0d:2f:22:34:cf:e0:93:86:6d:db:a3:c9:af:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sangiovannivaldarno.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:45:93:0d:2f:22:34:cf:e0:93:86:6d:db:a3:c9:af:cb
Serial Number (int): 284908821379578492555527551093062358380491
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:0e:4f:3e:6a:3c:11:0e:aa:e5:86:20:fc:a7:d4:2a:0e:6a:9d:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:09:f5:01:23:75:94:a0:27:a4:f9:7f:2c:fb:2a:f2:84:5b:c2:19
Fingerprint (sha256): 3a:d0:36:da:ea:37:a4:41:7b:46:2e:7a:8d:11:dd:9e:75:74:69:72:42:aa:a7:57:5e:cd:4a:7c:2b:99:ee:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sangiovannivaldarno.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sangiovannivaldarno.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sangiovannivaldarno.org

Other certificates including the domain name sangiovannivaldarno.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sangiovannivaldarno.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284908821379578492555527551093062358380491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:34:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 19:34:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sangiovannivaldarno.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849697956871466947502827946053961976133954920760251382432922941375438476620435654165152068473325511950565206197735151176651588194286888990611887164171738803001551833128633459915632199261804701632735624745936181086917418752256685964376552449300185693416132825666852805708546352566792787029290393956841165858800192749521708829896254405022623910863495466262074496838363670112338777403091525527765175810122919905010751780732035436433334104129094328300071368447890647539326230383855914078848840873031648061065680336685373581892508781648822863749786271946956355623021789035360740273481063004445304319466634727906099020041318075957533683448883780625732257539306395578562272580661481338854264616736265525167640175828917688227899922915504526566702612419721005478138338426789007405491678681084465863842264065356653849494986413027446402808644458756824742486998818963817331759562855017408317783420263026692436973275629005242215977827640905409727818046509292808520467663419595408600921859176446292437048693591919801650792602421143702824362839526672124917626955140730309358086989769192480509430968634660784147338878981431355598010460786814225993335044514671544663691668238132844690731771735349092789180387149436350640546271288101529327545782469641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab0e4f3e6a3c110eaae58620fca7d42a0e6a9d18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangiovannivaldarno.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed29ed47200000403004830460221009474b761973bdb6014c1e86caadc31b9b2d04641c5f82fce17003deea18a5eaf02210099041ea9ffa7df316e5189a33ac2c6f920b47f4f5a4f1277c148cf5099a10c4900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed29ed49900000403004730450221009552b2068f178925d9c88ee10d81480511efa4c5aa9c92b007aa9dc025ba5ef202207c72e2c2feded981268f663fd3bfd07fb0a0d443f73fd37c5ac11b85aaeea687
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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