roccabascerana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:37:31:5f:1b:3e:41:a2:80:4b:2b:32:2a:09:20:6f:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roccabascerana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:37:31:5f:1b:3e:41:a2:80:4b:2b:32:2a:09:20:6f:07
Serial Number (int): 277743775298787364918648182726580575956743
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:40:f5:da:af:ea:9a:8a:1f:67:ac:05:9e:59:8c:5d:11:0f:ee:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:84:eb:ee:5d:21:4e:74:12:ca:44:cf:63:9d:a6:67:74:61:31:0b
Fingerprint (sha256): 43:78:c8:8e:e2:84:7f:c1:f4:8c:2b:48:e5:b3:bf:3f:80:9d:60:c5:81:ac:69:aa:e3:84:1b:11:f4:1a:76:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roccabascerana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roccabascerana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roccabascerana.com

Other certificates including the domain name roccabascerana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for roccabascerana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277743775298787364918648182726580575956743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 16:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 16:19:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roccabascerana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800708874309290861341386688129671099876733324227484409771943970949138046173783252254007230286749646859190479111565430234628231468280576385141814153566619350140309613127838556238309712918165125747399826122744234728426999585951003225873472617042224175044142627111493975605867409224491961842141423079599129671346060547663127908302108151529039215182161731434423747473782419354503537369591606385062375444846500577832098932276605654748797867409621615912159012563297236072109472617853338361199795559815162548740475078654967328029000652732157807466331498317366529648527388280030145105786950142825709582483546415804991051697215484205692182259578440877579490500111999328462177806096225639092471966914534479111324744288638433986876718024996032794877575376486016955614276291097477698184068544937455936879427231855674297929854380260334086822997917913272527263906386701098845615569443781864264860199941035190959426071356266510919654174917630061476411112087556190559088265271416096704116675448337743760274539337289478157563662833174085492079989788040225669809324334599991724520980078939668577170538128915780574508952749290853091892556458957427044210078969383906239902691361766291465584003632203119089204839584673470110714952354433324614759554429993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d940f5daafea9a8a1f67ac059e598c5d110feece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roccabascerana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2f4b00a00000040300473045022100daf9a03c25fb1c1c9c96d0e0d12afee876c71a2aded7a3695eca87b1a55bf96d0220111bf4e0225b1c4712c0d57552d40743d745763c11e353f9497c5574106ab8ed00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2f4b02b700000403004730450220480c5cd37c9b59becc95c95a61c8e5442b20dd3f00819b91433e97fc5e405fe1022100cd079c01af5199a6f2fbee860788b85bfa14e8f67746cefb24640a840b3a617e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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