www.acquanegracremonese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:86:11:87:dc:7a:39:27:d1:79:69:59:7b:2f:32:f3:53 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.acquanegracremonese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:86:11:87:dc:7a:39:27:d1:79:69:59:7b:2f:32:f3:53
Serial Number (int): 271383254012063047713468351888798612910931
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:1f:c9:0a:07:0b:2e:23:62:ba:60:24:0a:0d:fa:43:6d:8f:10:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:3b:8a:15:4e:32:14:33:ff:bd:46:c6:ee:17:6c:af:4b:c1:03:53
Fingerprint (sha256): 3e:63:19:a4:9d:50:74:bb:d0:f8:14:64:ac:5b:85:3f:19:cc:75:6e:f8:1c:c0:35:a3:5f:17:ec:af:b3:2e:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.acquanegracremonese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.acquanegracremonese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acquanegracremonese.com

Other certificates including the domain name acquanegracremonese.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.acquanegracremonese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271383254012063047713468351888798612910931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 13:29:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 13:29:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.acquanegracremonese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667797427419884765875679727509721587488244190499909304728702746486461496457254379126799381854594070359726212177116312076543849172045620591587925071332616576930738648156160914236769934667323591733683355965429651652306542706031948682203734854247533258108402021361208573927875101156871943627480241092596984651571514029029836259835805393288830103224160054033957747161855608365593695137145529892213065403022519431878086452049004812099613406164084281029011371788389240347355023375351705892588845270638800166344585236691659501217843702908403430868248745556990337134429411632241219391617571069643531490047118697789293542552362199310988690352649654182685948724381486597948374953795636779727304550039484382672110486753345195772429521916682630116962583038187185972723229105486312295428705523162798086479378126807813520968355148760923275667578700177170293166356181662353842962146380920042612917828354492609509717366156592792258851749492732164012438661693323716339754773745842404493290021685080170818350880002821148268095807013837600896960875272500070994964325521945248483365192498076228930364389074705924044394065778747930381911300523406065880156827170335756023452204042796579623549623864515281955632390218567149530372805981842966957731599444761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591fc90a070b2e2362ba60240a0dfa436d8f1098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquanegracremonese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc05f76980000040300473045022063a5d816a5448b6f012baad6145c9ccdc7e7587fda76001210815513b5c6bb27022100e1a564229826602a91866758189131d6aa80e789a5afdee5f1496932a561dd1a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc05f769100000403004630440220233e0b3d3794662a1494e239677cf936dfccecd65f40ef43416c6cb33e085b6d0220346e30c05f60d220edff3cce8e1219ff08d97a49108e885ecd4c818a2edc6c72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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