www.castelguelfo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:93:ac:ac:12:81:7b:96:6f:e1:1e:9b:53:69:e0:99:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.castelguelfo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:93:ac:ac:12:81:7b:96:6f:e1:1e:9b:53:69:e0:99:7c
Serial Number (int): 268679080581101130024177151852078891571580
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:4c:ef:e5:10:4d:3e:1b:b7:ae:80:c6:f0:34:c6:d8:c9:39:08:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:3e:93:75:a5:eb:4c:16:b1:ec:30:6d:0d:38:35:60:2c:aa:5a:17
Fingerprint (sha256): 3c:04:c7:2b:6f:d1:1e:7a:e3:59:89:ca:d0:5e:dc:17:ed:dc:e6:d1:61:c8:fa:cb:01:2e:33:95:55:21:8a:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.castelguelfo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.castelguelfo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.castelguelfo.org

Other certificates including the domain name castelguelfo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.castelguelfo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268679080581101130024177151852078891571580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 02:34:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 02:34:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castelguelfo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752466088283617485220407927010618608344340545358402737990372204328577166224335667464864520753723524906676457560530481837412962285727002473280071659356780534633094609592382677332671863871581637286250015785325229525276350728956806993779474923774145635511503712804837707217896202994913939938100028165958746895649859883998476148894177855843452321626938730094464788050529839988489496850982077687809567359362367011152709929214446497777257444413878257909865287636549936924099480276073790624755297490138752619647262150767414744912625911294538839016085409849300319473178169252083482153110173724550623034433624358115799056388419716405391852598257795843360913708322875265748427838313161931989765093253318483447205322628731228193392637460392241265683853011728030242367464922678678600270031664892634005373016172715358179757006538486976306139390745391332372131516827024053630629927481768035220399201685477350753451436986853482726075438707226399126770933077730469807890584814395765302218907641835075676312456026319902861833785772503247982477202633552827552646445258112623150371120680464927650697658350218728411652919223183788651540891609947645198914890576602905488356856228312670440580383146934464714987271010842610633725211356979632365393404833671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							474cefe5104d3e1bb7ae80c6f034c6d8c93908ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castelguelfo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed94650120000040300463044022025d3b733ec28341df08cdcb9e694beb2c14d98c9baea1d817ffd7290d8850ce802204715aba170536f0860588f87016bccb8078b6d59e0e7c2ebf9c00392f0c44f890076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed9465163000004030047304502210086a1975857e3d16540571eb851be79b6f87eb9bfd62964d07da47d1b76d3a92902207ad6bea5b5bccc1ebbdfd0882dd826837ac95eb0e2ad9c6cf8a80c2b5b8e9a36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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