reggioemilia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:81:b9:0f:3c:32:6f:5e:96:98:f0:95:aa:d0:1b:4e:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reggioemilia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:81:b9:0f:3c:32:6f:5e:96:98:f0:95:aa:d0:1b:4e:1f
Serial Number (int): 347941010288579635443853160613612346887711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:a8:80:b5:92:47:68:15:d5:f1:d2:33:4e:68:95:d9:9b:f8:47:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:48:18:16:d2:8a:c2:73:bc:a2:2f:61:1f:b9:a8:be:cd:30:bd:c7
Fingerprint (sha256): 40:68:33:16:e2:f8:06:80:cc:ca:74:cb:35:35:af:7f:f3:ce:18:e8:44:19:b8:c5:c7:c3:f5:19:7d:f6:e8:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reggioemilia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reggioemilia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reggioemilia.org

Other certificates including the domain name reggioemilia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347941010288579635443853160613612346887711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 14:54:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 14:54:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1014073455992459677792773193503241608388260959564699376054289156091555798541335656242063597890547221433149899709926436730727756962508553787518924708850509098073253833402847605930733484084951145641556634806345444117514363038189942642585505821503946733826380165416205586235912864958975323778653818994034609960217118859079309583072462313238152060296383363775438394079246742131182165904009615660425726417224829908128483787661040369091613566336612876811579584099071517558361748888591916866036214751778025012203384766105004470511472386637178234020842841090870493436184366404020937402912625926306968575305985388313564516927685344060353519990410093305718608854244703365679072955506763204713430511062808731039100770203262145941937559351407036647057460454861091516076154610709580163867919187375886898815712484681557073253640797601093061845130529756155527802341993128135679219583235657172590547110208192582244442129976772333224990488511139707343090044409169669267964216545530510520560558528445405946620994259118189794513563401344712603220432219230958732708882761012358573212212614576199874241789119311763655843277133035700926145059890215562648620804640916737824903599485978036079095439754582621684527882158664726536181938947309152713595917070429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1a880b592476815d5f1d2334e6895d99bf84717
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702582a8e600000403004730450220285488d0086590bb58afdb2291cc092071d98af620c71f31b1992d3e6a3fd2a0022100c70ab98ffef60945f5293a79aba4321b96b22522ba68a19bfb09168a99aa6bf0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702582a8d40000040300483046022100935b49b84bc4e0ec725f4eccb99426ebc65022e88ad6b37be04406a4b1a503f2022100bf0247b85424f29e699089bdb2519dd8daf2fef592cbed3c9cd57782e51e1ef4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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