michele.negrini.lewenet.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:90:b2:89:04:1f:6e:98:ed:87:df:2a:ad:f1:b2:0c:cf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=michele.negrini.lewenet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:90:b2:89:04:1f:6e:98:ed:87:df:2a:ad:f1:b2:0c:cf
Serial Number (int): 293175453758178620216643462713963424386255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:bc:7f:e3:69:35:6b:57:73:2d:96:f5:02:1d:43:d0:4a:1b:ea:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:8f:8d:5e:1f:41:15:a5:58:44:4b:91:33:b7:f8:90:33:14:1a:d1
Fingerprint (sha256): 44:21:6f:fe:67:f6:f2:75:20:12:3d:44:3f:48:f0:6f:c1:50:fd:4d:f2:84:15:90:7e:60:e2:e7:24:5d:93:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate michele.negrini.lewenet.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for michele.negrini.lewenet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

michele.negrini.lewenet.com
www.michele.negrini.lewenet.com

Other certificates including the domain name lewenet.com

(limited to 100 certificates)
hr.lewenet.com
*.lewenet.com
careers.lewenet.com
booking.lewenet.com
sni.cloudflaressl.com
careers.ukbts.co.uk
*.paas.lewenet.com
*.paas.lewenet.com
accounts.senapsis.com
facturen.youngcoders.nl
bit4bit.eu
careers.geninvo.com
www.dekrachtvanzuid.mkblimburg.nl
invoice.custom-interactions.com
forms.imito.io
helpdesk.provisionpoint.com
dav.lewenet.com
support.roodrisicobeheersing.nl
lewenet.com
mhg.uksecurityscreening.co.uk
lewenet.com
lewenet.com
ticket.seattlelab.co.uk
support.lewenet.com
lewenet.com
careers.blueprintsecurity.nl
support.mister-bk.de
myhr.ollyandseb.com
books.cs.zohohost.eu
lewenet.com
careers.tecamb.it
prova.lewenet.com
careers.rsaweb.co.za
store.lewenet.com
lewenet.ro
careers.ukbts.co.uk
support.lewenet.com
prova.lewenet.com
lewenet.com
careers.tecamb.it
lewenet.com
bit4bit.eu
help.tholl-gmbh.de
supporto.lewenet.com
lewenet.ro
support.lewenet.com
testhelp.pdr.cloud
login.europabw.co.uk
forms.xeniosusa.com
jobs.aarini.eu
supporto.lewenet.com
dav.lewenet.com
lewenet.com
lewenet.ro
support.unikie.com
lewenet.com
michele.negrini.lewenet.com
jobs.liverestaurant.co.uk
www.dekrachtvanzuid.mkblimburg.nl
www.lewenet.com
careers.rsaweb.co.za
careers.tecamb.it
marketing.lewenet.com
books.cs.zohohost.eu
lewenet.com
dav.lewenet.com
lewenet.com
lewenet.com
forms.fazemodels.com
careers.rsaweb.co.za
support.lewenet.com
lewenet.com
lewenet.com
marketing.lewenet.com
careers.tecamb.it
marketing.lewenet.com
www.dekrachtvanzuid.mkblimburg.nl
*.paas.lewenet.com
support.arnetsolution.it
support.lewenet.com
carrieres.porsche-informatik.com
erp.lewenet.com
careers.rsaweb.co.za
lewenet.ro
lewenet.ro
lewenet.com
booking.lewenet.com
erp.lewenet.com
facturen.youngcoders.nl
lewenet.com
comment.lewenet.com
bit4bit.eu
lewenet.ro
help.tholl-gmbh.de
lewenet.ro
recruit.customia.com
atletehub.atl10n.com
sni.cloudflaressl.com
facturen.youngcoders.nl
lewenet.com

Certificate

The complete raw certificate details for michele.negrini.lewenet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoCVgg+CCJluPCuBsy6x
udLoDnXuePaQ+M7GWO4On9LyX8oReFq2oVy975RnCAetHQkjnyvYl369mR0ZKblf
oiEZFxAt+2SAiNCKBcDeZhv8eXgdPaoPnj2FWRJJ5aAs5FIhnGQn6IdSr2toOZS8
+hN+MN9eDb9hzj9AnFmXJAM1I+Gns92B86BDYehx4CpHJU7QYo1Ty7UIEkieS7QG
PisSQTvtx5cfoUiX1NEQTcG1eX9gRlxkh2mjwXMlLkmZ34lXueZozpOftZshZ15z
XZ4f4Jxw1WUvOeJ7fuTe0zboJAF2lQxHV2NqyusDszLXtWw3o4baE/Uk8mFVy9Zo
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293175453758178620216643462713963424386255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 18:53:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 18:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'michele.negrini.lewenet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24048685084966987086854421101676877742625088745487815243706185278029541263273784686708380402898874497886268539715490136891498908815341034851599187783795473650340265489334268751597159413424513348730102221879528612072938991641174517165762469953967868974407628848185459442987604662439869712971660869397493212336614820763047452393793221020264146670191922586728222445811523547549144985471828809611776256158460846153615661707116905852078681439899789981581875272867290886211303971445967787347845266482416977233936871527025645023113529231542676494465253413406800595436323098220645806666397623307695850570939331917692393646209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9bc7fe369356b57732d96f5021d43d04a1bea3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michele.negrini.lewenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michele.negrini.lewenet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0b1fc9610000040300463044022067127a9e963ecea4e3f4a268b51a522bd6b5129db1a2c1ec8326e5589dda184e022006b0d67fa51f6bf02041d8e3cce86309ce716b97236d44e9d79920973f953f4f007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0b1fc95500000403004630440220632a80de203248ce3fa6dd624b36eba146abeb0843b36f3b8c402dc97ad074af02200d720b840d27983902e9db2976a03f7fc8c184c73272aeebb80ac6506257fec0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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