lavoriagricoli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:3c:98:e2:c6:96:7e:e2:bb:5b:38:7a:e6:94:7d:27:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lavoriagricoli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:3c:98:e2:c6:96:7e:e2:bb:5b:38:7a:e6:94:7d:27:23
Serial Number (int): 305654113003430655186223429801082342942499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:0c:b1:64:15:17:ba:85:7d:db:70:d6:b5:ea:d8:03:7d:22:9c:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:9c:6b:c8:31:6d:34:d5:03:ce:8a:05:c9:cd:88:50:fc:e2:f1:b5
Fingerprint (sha256): 43:d8:cc:ca:01:53:86:d9:66:00:6a:bb:98:a6:89:b5:f3:53:35:76:11:42:e8:56:7c:78:dd:07:bb:c5:87:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lavoriagricoli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lavoriagricoli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lavoriagricoli.com

Other certificates including the domain name lavoriagricoli.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lavoriagricoli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA4I8mOLGln7iu1s4euaUfScjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MzExMDIyMjVaFw0x
OTA4MjkxMDIyMjVaMB0xGzAZBgNVBAMTEmxhdm9yaWFncmljb2xpLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOQ9RAbCsLd8KIGgmkY2J7rM13uu
ys4KuCBAMf1uWZE4vjYkCZV6tc2hedWw7P4emHIH3D9Dcyd/+Wdl+RLRjUl+i6Sq
kgJ56WwumLgCMJInulKk9fSvEG7y9uFdq7J/Qu9vac348p1AkrmJ2OabSr7LUMvN
JcXyUOj+eQchvLGoDX5wNgmILEp+nsDhcjx0Ut8XV6yj+2BJmwDKD05IAkSXS8+m
uzSLoIMxelU7ya7zsDfWUw8nh+RZIzXxM2JcoCvnqFz03VncTsVVyVbjB98gS+FU
iZA/OWPMOLNkh/uC7/M2PPEuyRaw4aLfRSOUrcMz84bPyRMNdLBr1OL6YvgZABYs
9cpyZIW6hGSAnPS3FdSeHX3EEDLoru3Flwa5c6VjUzC1mCgh7Xkr1XOwk8VINJiw
vDo5isXNIM9EWNqnUkdLTEdJl7s2ngNM31xPNEEyaYYjrToD86od/vXA1UbQnm5C
eUdY2Old/qvRPX2gTU7SOcg2s87P0EmuI7bGH0IdZFSEMOs7HAU39a+lL+Qk7X17
yUbtp1h8sTs88us401nzDO24MTJCacH3IUaQH1+ZnprW9gdZF7znxf6reTM/H0Qg
sxK0gtlBYwQIWvjbGK/m/8yauy3s5M53qzwlebAwaSP4dLC3oNkc9MZWrBNjRbmt
rIsgsudvERnlxiGZAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FEQMsWQVF7qFfdtw1rXq2AN9IpwZMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISbGF2b3JpYWdyaWNv
bGkuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A
AAFrDaBsBgAABAMARzBFAiEAiI/FDPU8ueQ3Yn32ArMk1ztg4r9vlucxdrDptnyX
yI8CIEr6pKuNxbvEUZChkEWD3ycG+bMw+rDsDU1bAlj7AUIfAHYAKTxRllTIOWW6
qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFrDaBr9wAABAMARzBFAiApKP4oiQfc
kYhfvhAdB9SNkBJU+NTWJ5S6Fp5L3oOaCwIhAO+Cy9/PsfxDsMdg++SF6R3ooNIc
V1Pipx2U8JB20ZROMA0GCSqGSIb3DQEBCwUAA4IBAQA91Rr1MprOVBMlY6/RLkLq
WXItlMBSWgH+w7qCdkdUQNkAImMAjml2qigFGKCkVOXany4/taeBNTz7kk4KUOZu
f+VtAXLYAKSnaCI/gIkZQ+mI7ATALJEAD0a7xK/VQdwWqzIJl39Ql8ha1iOO2hof
Xs2nkCHoGKJnfp5O2ey+CmInZllNMMqDKk94bttlQU3Nf04IkywctnxU2fBypxH3
hw3DncL12V+uMLl4lBEKGyqMmSv6NdrmgmKmbPbv86SrLa+VBZ9IVtXE8DDFJVqc
BMjMbl40NoRGbW0hDg9OFOGVHrT9P6LD84ZwLnNJRJOKji/MzSZbFZELZvjEp4P0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305654113003430655186223429801082342942499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 10:22:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 10:22:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lavoriagricoli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 931135184869719323258582030201581632495384915647908952682266066052218020202022945003816189176163439825998334994539988747923716301262287091932491604989606043397899307104239765778627985960786132251371739540124807960485397880575390036377181225048325371325350091555019234800064305995485312362537674041473429445939730223549004419193493400738325378374593295995708132507835181686064553078114533137127722531851841691678951345308994919056822111679409807477406032221245601926338501737927653223617156755731966215263103774282778403329774485440243253184107322690593216020577794284346536402096454863491322138903013887099039393238982569466387339659979146806740832331350045759105220830721283006875833413078885208553879355619217605844937030590095463609476378912455901062912454288081925777484306433142551432390898364240087279258878294338093692195779769500089318520320919189751921804566506642691437671763347768940696111117704469825745283929036052453398411837402332934235330263458542676483498832066273951861337755868872332498558382553617840709246367608910357226186630386309040385144776518834088650669646068681584351576971162697956950109646435214541245624891806444410619897046665997789918654100627559272302293820624255603623501547500674803795929285927321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							440cb1641517ba857ddb70d6b5ead8037d229c19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoriagricoli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0da06c060000040300473045022100888fc50cf53cb9e437627df602b324d73b60e2bf6f96e73176b0e9b67c97c88f02204afaa4ab8dc5bbc45190a1904583df2706f9b330fab0ec0d4d5b0258fb01421f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b0da06bf7000004030047304502202928fe288907dc91885fbe101d07d48d901254f8d4d62794ba169e4bde839a0b022100ef82cbdfcfb1fc43b0c760fbe485e91de8a0d21c5753e2a71d94f09076d1944e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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