sanpietroinlama.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:be:82:d8:c8:3d:2e:39:d2:8f:4d:ae:04:86:2d:d1:d5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanpietroinlama.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:be:82:d8:c8:3d:2e:39:d2:8f:4d:ae:04:86:2d:d1:d5
Serial Number (int): 267034608380671540259588639825835525525973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:08:3a:fe:ec:6b:be:64:31:db:c6:ce:fd:16:ad:de:b3:a6:fd:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:9a:8d:c8:b7:ca:2c:68:d1:13:59:b5:b2:f7:21:b5:a1:96:ea:6a
Fingerprint (sha256): 41:b7:bd:ca:6a:1b:c5:bb:33:85:d6:4b:31:04:a8:5f:ee:a2:cb:0c:3f:4e:f6:e1:58:0a:bd:2b:88:14:4a:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanpietroinlama.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanpietroinlama.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanpietroinlama.com

Other certificates including the domain name sanpietroinlama.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanpietroinlama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAxC+gtjIPS450o9NrgSGLdHVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcwNzEwMjRaFw0x
OTEwMjUwNzEwMjRaMB4xHDAaBgNVBAMTE3NhbnBpZXRyb2lubGFtYS5jb20wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDN0Z76PY4wpEvJ55O40ZKrZLce
/uOgWiHHiYL+ibDL9uDoh5tDrGZYDTh7h6KSTMdAyU1ytLQTcdT/oNr/OM1+4ib2
YjVqxcC8eR8v7gS6fZZWgN4ClViRMGd++wvDn7x4EoRBRunBFCefL3ZFFdOGjlfv
Z4GfjYak9B+gpRtP2SKAZZIUuUAM2yxaunFN+07HDaeEa+b622EzcFA/PBnGoW2/
q/XwQxHq80qjMZTy3dNq4r50j0tGV6k1SAd+lE2ir6ngMm0NHBgNx0UDfWMqoPqS
MdgDU/i3RzQt1PZ2rBHQdaJu+Sf07ejvpWAy+ZkVGgHJulUlsetYVm7NBjreEv8e
ZLh1rRGTZS0vSaaFnEC1y1dBLIuTtWO4igposRXnu5foamuRPHxUzu9cs+gneg5I
0BftjcctZsgtgAc3dkMmaS/A7E6h9cmvwBYnfvTA2NZUOE0jRu1mwYw4CjSfdM/o
trmL2sWeIO1MHSbkz5fB41Hk7aNMNtMN1w8R3zZFIqGFiSH0ZzOutFSVX9f++7D7
rwjmhYjXAVGk6nck6fpaFxYhmIRr+u4u7h+OtQSKgUY7O12OWamebejOu2FSCGXL
TXlJY5GZSfjleVLXeoPZte1HPBqAvouD4eIKqpwfc2VuEwnz1yBqM9+K0oy5W9Zl
+HKZc0Lx0TGApERzrwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBSVCDr+7Gu+ZDHbxs79Fq3es6b9NjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3NhbnBpZXRyb2lu
bGFtYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM
VgAAAWwyexyqAAAEAwBHMEUCIQDrkhNQ8H887F0sbthRHeADFpDf7y66RUnaoOso
drrOUQIgGUk+eV17N4CUlk4xNwtmRXaC6zkpAJhzd0yJYJEXsmwAdgBj8tvN6DvM
LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwyexzUAAAEAwBHMEUCIQCEmVeA
85FiCDFT7GW8CfoKmANk4sb8z/UkVtYPadAMngIgZvJ+tD7yM1HgP4/kE0fXCkd2
2m0wqsQfGCl9tBkC50owDQYJKoZIhvcNAQELBQADggEBAJlI739skbdMWabqjbP/
zEulI3Jzl60lHewSvbsv/I67wSIBzZWkgEljOnldvdAjl9oaUsx72bQ1iaj3OEjJ
7wI89+fObDyRYXnzDfKcQCkqPn4AJgl0IMaT265hcRmM7T7bgN7ypdaaJCkgmUZY
AzGnuvr7M9W+BB7B6mTIaQaUMUrMkd6w5OqwFdQ1lHMGEgxDF9vfT27Rl2+J2LUS
c+OQi3BSRfWJr4ldMNr7xJGcaoS/PgSGP7B0FhkQHjOUMpqfVDNaC7yyoVdfwAx1
4UCsQ/TzTlI5mByU7Q0+CrkNHwgWiC0zTvMmyjV9SV5eQjWcWPYR3bQha4WaMRTJ
6Qs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267034608380671540259588639825835525525973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 07:10:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 07:10:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanpietroinlama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839667577276605249694737255003395227861964635601882547573676588723197888373427411995228342092210601124690885168819257026741209005568351576442865868074185874703855225121035955167138522011007095278660439107609997838405314805524626796962797213370388388793601348466183375484046479438450969683120961745712782410934847095274573726713798827445361506952182205753429636210936658149228066355548944213419766075564112901187481808629156106036529734766964915734641957696684376310315927154117413208004749174109263753195829201966162269867364632277782614723080043708471045396476184125677864102587940966364375517683939539763656198388581561339280652699727055496501342310512643820874964044586789077792068451592777257086089958964338602174360184273072070296084007633134398009368272805187061702805863578632786554891999156477370961012334275697924494995730724036991450213201594493030079133376250044133212795919961351850474257955044598437997009238895897835265447189240870193713055233680007992378846544514063968033680581726828255282059891439639762899662171278442155916636234310508645087566494974411384888339935786718844116875043864353321930320118703626856972041573373759043432408163288924227329715272693571369326237206790094025299800704458036134999112741581743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95083afeec6bbe6431dbc6cefd16addeb3a6fd36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanpietroinlama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c327b1caa0000040300473045022100eb921350f07f3cec5d2c6ed8511de0031690dfef2eba4549daa0eb2876bace51022019493e795d7b378094964e31370b66457682eb3929009873774c89609117b26c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c327b1cd4000004030047304502210084995780f39162083153ec65bc09fa0a980364e2c6fccff52456d60f69d00c9e022066f27eb43ef23351e03f8fe41347d70a4776da6d30aac41f18297db41902e74a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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