adviva.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:4f:f6:57:91:46:5e:79:f5:dc:b9:57:be:25:9c:ff:bc was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adviva.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:4f:f6:57:91:46:5e:79:f5:dc:b9:57:be:25:9c:ff:bc
Serial Number (int): 298533923882436737626855445307266881617852
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:f4:5f:94:0c:ff:94:14:4e:36:b7:3c:42:2e:53:8d:bd:50:50:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:a8:a6:d2:22:90:b5:42:26:89:3e:fd:a5:4d:5d:a5:48:36:07:79
Fingerprint (sha256): 3e:57:22:3c:21:d7:ee:6b:8c:7d:a3:9a:6e:f8:8e:d3:cb:61:b1:d8:db:9a:1c:15:7d:da:2d:3c:58:28:3d:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate adviva.it

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adviva.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adviva.it
cpanel.adviva.it
mail.adviva.it
webdisk.adviva.it
webmail.adviva.it
www.adviva.it

Other certificates including the domain name adviva.it

(limited to 100 certificates)
axis.inflowtechnologies.in
www.advivapm.adviva.it
support.studyvillage.org
support.sapiencebrands.com
advivapm.adviva.it
staging.adviva.it
test.adviva.it
suporte.oficinaintegrada.com.br
support.comisocoffee.com
support.studyvillage.org
support.rovaunify.com
support.studyvillage.org
adviva.it
kb.adviva.it
support.studyvillage.org
test.adviva.it
support.terris.earth
support.rovaproducts.com
suporte.oficinaintegrada.com.br
test.adviva.it
support.studyvillage.org
kb.adviva.it
adviva.it
assistenza.adviva.it
kb.adviva.it
adviva.it
kb.adviva.it
support.coachwares.com
support.studyvillage.org
support.coachwares.com
adviva.it
suporte.oficinaintegrada.com.br
tickets.mozness.com
adviva.it
adviva.it
adviva.it
adviva.it
kb.adviva.it
assistenza.adviva.it
adviva.it
adviva.it
kb.adviva.it
support.rovaunify.com
adviva.it
support.rovaunify.com
support.coachwares.com
advivapm.adviva.it
test.adviva.it
support.rovaunify.com
adviva.it
helpdesk.snap-compliance.com
axis.inflowtechnologies.in
support.studyvillage.org
adviva.it
adviva.it
advivapm.adviva.it
staging.adviva.it
sni.cloudflaressl.com
support.rovaunify.com
support.studyvillage.org
adviva.it
adviva.it
kb.adviva.it
support.studyvillage.org
support.terris.earth
kb.adviva.it
advivapm.adviva.it
adviva.it
test.adviva.it
kb.adviva.it
assistenza.adviva.it
tickets.mozness.com
assistenza.adviva.it
support.rovaproducts.com
support.rovaunify.com
support.rovaunify.com
support.studyvillage.org
test.adviva.it
support.studyvillage.org
adviva.it
adviva.it
suporte.oficinaintegrada.com.br
adviva.it
axis.inflowtechnologies.in
kb.adviva.it
helpdesk.snap-compliance.com
support.studyvillage.org
k2r.bluewanip.com
support.rovaunify.com
tickets.mozness.com
support.rovaunify.com
support.studyvillage.org
tickets.mozness.com
helpdesk.snap-compliance.com
kb.adviva.it
support.terris.earth
support.rovaproducts.com
support.studyvillage.org
support.terris.earth
helpdesk.snap-compliance.com

Certificate

The complete raw certificate details for adviva.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkbp/i63egzSvBFz7lq0
MX6X/Wf01zUjViLle82U6Lfjn9RScL7vyA2OQPvCq5biUdmTpqI0zunaL0LsyOTO
QDYAK+tNf39Qwmz47nO+62p6QBpwC4o3xVPVN0upwWFZJX1Od7m9cUMjpHb4QBrG
H5YEvGY4PQaNTC2u1V0Ex68W5BdovD9GlcLgnxmIuZ2kH5BokDx2Iq0iG2FsizpK
DRroiBAYfRcH0jNS1HrCLjG/pG7Mt6k8enIIURGL5BkbOzIX1Izb3Skk4BbL2Xoe
3HH1R+9zxN5sRUlUW3pJzK7y/R0a1pkPlHzEnlCz/0CX7Iz6oyykUlSZaPJl8xi2
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298533923882436737626855445307266881617852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-14 21:28:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 21:28:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adviva.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25030153397136187255650415851538850359980582300091348487517884755609135084483674466728527537417429977995039489042426673759224537711468514471869454718168566986291379101345275409032915265727570856935712070302463018713691132336906263889472972865924289751556758208881931348467444212558118194697201486073595889199865144624257683731178462042019299488925674856834772497374002227751887346002509442162283197687513384681021979488158603850088665216245953407478053349211714532282623867192845524432482144218680555006613815835914415285790035873640073516432876567968280581680643725944391788267114925832226940807029338436178227541671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf45f940cff94144e36b73c422e538dbd50503a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.adviva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.adviva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.adviva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.adviva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adviva.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001649ae941830000040300473045022100d6a9824bd635235dcf8cbebc9e1101d97a952f148fe5f417503abefff5091fc1022062dc5b1d1139fbd83b11c270c4196767bec16c601d81e1f84b5efa84694a253f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001649ae9440d0000040300473045022061fdcc0b3c99fb4e48b2f36841d5edeed747c7c175e2a3515dc82359157cc19302210095e0e11035d9372ac5bbfb8d05d9866fab136849594cce40bee881d6b82e106e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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