santangelolodigiano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4b:3e:f0:1d:5a:27:ce:0d:ed:6e:24:45:3d:59:7e:6e:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=santangelolodigiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:3e:f0:1d:5a:27:ce:0d:ed:6e:24:45:3d:59:7e:6e:c8
Serial Number (int): 374053980128428816641054261840896839282376
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:5c:7e:e1:fc:af:1f:70:83:4a:21:95:f0:e9:f9:e4:22:31:e1:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:8e:0e:65:7c:f1:e8:bf:78:58:a0:2c:45:cc:dd:65:bc:f1:79:01
Fingerprint (sha256): 43:cf:0f:df:8f:bf:03:49:d3:d5:1b:68:d1:10:c8:d2:cf:b6:3c:e7:23:26:f4:50:ac:c2:0a:30:ac:93:bf:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate santangelolodigiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santangelolodigiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santangelolodigiano.org

Other certificates including the domain name santangelolodigiano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for santangelolodigiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374053980128428816641054261840896839282376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 23:24:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 23:24:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santangelolodigiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926511890379840911422679150359940257673642792338912549121607352872548810417888124316049418808148667324771553362985345652007302950554893696985284896945558803169540552265731812594882863369520155950570189140079816270862562886487548445361457323880186939701188378865620886851756929419170361052886390454319641064619053023327657800699400329458950182273997777830909554641949134531908413535822705503710730924684189657956925433362480861571295698605596142138776480291934226010361929138439033508816932270151574287298817055235197652536173101045063334298337106246815360826667619182272660203918509054271163353774084375264993148455537829341388885135911265340287737525418120450021679537476722493552937329922518550997367808986948180788608249289600395357072579214978311112704325405961793846601683538009586082245002428881547003896484767960456108577668839103954149246100829128848377443728980166674866481949585728689639505537950069375205079462227023488404874791763177366277328292776855376630724771275733183638558120992858647634987200943010019957167031463526108372104220000296418012706581826960087076188743571108850019219748985325730428242992995251628188404609366942438656910060269652989433773229130822585619923275721045469285114792203977924006472553876463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca5c7ee1fcaf1f70834a2195f0e9f9e42231e1de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santangelolodigiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017012bc2cf3000004030046304402203375e3fee506d9f967ff055fcb5b87ae4facf69c176a95ea2d79bc272a03e94d022007e439819bf476b580f3dcc38d352254eaccfd419973af845cab7c85c429bca6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017012bc2ce2000004030047304502207681f5de9f8b22b75d829f36b0bc7c7c5ff9b88722f54231150aa99820bfd0da022100ff88888c26aeb29c362df15c837fd1fcab2cf3b2ace5b1d465d0b9dc0d49f170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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