arcisate.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d4:e0:5a:16:09:9d:0b:47:54:b7:c2:7a:28:de:c7:6d:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arcisate.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:e0:5a:16:09:9d:0b:47:54:b7:c2:7a:28:de:c7:6d:47
Serial Number (int): 420887220339027697655289918679836862672199
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:23:94:77:35:19:89:cc:95:6d:97:44:aa:f3:2b:50:b0:09:bb:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:bb:48:31:09:07:fd:62:81:10:b6:b2:69:6c:b2:c1:c3:0e:97:2a
Fingerprint (sha256): 43:bb:cd:31:fe:46:3c:53:eb:01:59:72:81:9a:0a:c7:c4:45:15:ef:b8:b0:11:41:34:45:a4:99:13:c8:8e:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arcisate.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arcisate.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arcisate.org

Other certificates including the domain name arcisate.org

(limited to 100 certificates)
arcisate.org
arcisate.org
www.arcisate.org
www.arcisate.org
arcisate.org
arcisate.org
arcisate.org
arcisate.org
arcisate.org
pbfa.ca
vvs.la
www.fontanafredda.org
arcisate.org
www.arcisate.org
www.arcisate.org
www.arcisate.org

Certificate

The complete raw certificate details for arcisate.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420887220339027697655289918679836862672199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:57:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:57:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arcisate.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794461169677557576106474290884369076929487703576712501356848235722447258571812006099234380973677084277563980501082305708399978012109332498968456200146574625493377412582050317997042609136269265785515504623930014981530527812139758120071522836167465819996045642006371716775910880728435442099964643992100393704368555748498992538104757219465166956393940359581869824575269662308761673174134450582428527087069249172825187456473382709437255112404216172667569655913080046009300047260120568549243337192423350490050550718647281600256753686867928948300997202998853888596955854737294760044325218318289506249149043890735959936275523197770680357102955625953042015194558546113066349591414511533577970132759916728984414621083672851592110832889314422861854424651677878624251198673156994828391802448798799399637046231675281955329201453005977193572912803434761395769360087259281078343046354700459074555510152178250921473709275369754563657906920209019370536861328497343347775009139570735114449057355479806153186126309253801364100091975033941744309943452299460969967057396573140438086644936011232308041921178718764600631239197457068494958133552318637128026115384642225987626159712872022161661903645973722920966367185619598221400138086524379737110583541891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49239477351989cc956d9744aaf32b50b009bb6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcisate.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec90c9e67000004030046304402201fda246e3ba10c8f5cdc1b0e85d3080553628001c64b4acc546ca1420fd9328e022071daa7158fb71b8a22854d58c638d92146b1cba74bd70db23e20c9180d63e0c100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec90c9e680000040300483046022100eed02d9853d4fbcab7930b7565d9c22cef1268b7a3cf773c18fcd6163e31f219022100c2778326b3c39881802bc5e358006bd6cce2fe63c148d65cf9548166d8fdbb3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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