www.sandonatomilanese.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:a6:e0:d9:0e:a6:67:6d:e8:e3:10:be:c9:6b:56:28:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sandonatomilanese.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:a6:e0:d9:0e:a6:67:6d:e8:e3:10:be:c9:6b:56:28:45
Serial Number (int): 292184090142405387305502135335828340484165
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:fc:4d:cd:90:17:a3:8f:25:82:d2:ab:6a:3e:df:a7:03:3c:b9:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:21:10:be:e1:ef:71:30:27:cb:bd:b4:36:f0:8b:83:21:5a:16:13
Fingerprint (sha256): 44:72:26:84:ae:a6:ea:a8:4b:75:39:74:f4:c1:8b:27:d8:65:99:fe:e4:b8:0a:99:0c:0a:b5:70:b8:0c:69:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sandonatomilanese.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sandonatomilanese.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sandonatomilanese.org

Other certificates including the domain name sandonatomilanese.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sandonatomilanese.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgISA1qm4NkOpmdt6OMQvslrVihFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkwODE0NDZaFw0x
OTEyMjgwODE0NDZaMCQxIjAgBgNVBAMTGXd3dy5zYW5kb25hdG9taWxhbmVzZS5v
cmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC4k6pN3ZUTRD+gKyat
fryGBjBhEFIEXtgbYO8COu551TDnVpKjCSqmUK34dyXII589GKMbueSiT6rQY3SL
oE2ywchEtLyK/CbN6ne6IpNDjQdUzjFyNakxb+bX2ujIeJg3s+vKyF5LLdpR/eab
XobxbbNEWza0MdXLZZx5/pU6b4MMNtp1MLHl3guaTkwAybfVXwnhJwHkdgc2EJ3W
ZIuItb2s4PPHInD5VpeRUvq1Lbmuh0o0bQ9gg7Z6s2niTWGBI4nHlzvXKn9BOL6c
uz3JWg0EjvZ/dt5mbaURsm6LzvBPn2+3ipSrGj8De2SaYgLX37K7/Bn00y6j5uEo
4Mn7IWhyjDy6FRCEdi2ACrPQYAnT7CkoRwdD8+wE1DOn+XRKB607wbaKk5wRlnOj
6FxKdkFgpzeK7oKXPtf/XuFXS50SRev+/KKCGYXIfqs5v3ruIbsOf3mJiEshtRYL
Cd1IyJohdugyz090Y9ZV7wXTz9CBCBmdOTUIgI0Eir2dvH8T7Jfjk9at1eqxR9zo
MsTUEILwo/bM8aJNVd/RSKGJ/gE8kjuxbrkzRjNTib3zTqh82NuVKcCOu8BDsadT
J9IstPdpSNLgogjL/5PwZB+HzMFrJGmy7GkJQVHf3EyCdthao8+pNRL9SxVAHioc
h9fIPZWussWE6+RSiULZOhYBpwIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTp/E3NkBejjyWC0qtqPt+nAzy5aTAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGXd3dy5z
YW5kb25hdG9taWxhbmVzZS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9
XkIgCMY3NXnmEHvMVgAAAW18TQrmAAAEAwBHMEUCIQDH00KX1bUNKJg+1N3KWgZe
APiBt9uY5KSnVD2yvnv/lgIgF92gosi12xZo8wQast4Wz9UyeoWaLmN367eEvUhR
axUAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW18TQrgAAAE
AwBIMEYCIQCTJgyMSmrdW3G81/8FgEsPzJbmSrpemnv+UTbKeKvdPgIhAPqXfkxB
BsLqg+jQ8Dp3Y4VxOlHwqt4HYZrmPFd3EFEtMA0GCSqGSIb3DQEBCwUAA4IBAQAI
q0ggub8zvxnS05RsTxRkvt88LQ887ZgxmTBX8nc3B8/wywUXyTbWrdOJ6zxgf4wb
ty7Gpk0kESDcedaUg1uCSxR4B25h7CpWwYBJsQ4xS/pV0g08TEtSBKEWr7w2pPJH
1VPPbRUiwH/Ry0WxqAO5My1rUzAQU0T5fIb5ZOefUz06UbnAMapz7BZDRsafycVR
Fzpvn5oOt4bBjfli0LpSer5sUK8sIMNPS/nY1rnMC0AHq0XdoHRMQd0V3bskCcKs
kZ8O9nvriEQw7OkZ56cYkDbAtwxT8T+k9YeGu2i2+loY0g3xGP/Kc/pKl5oOqWtL
pe9Sjl6i+Y6CcaS1QFlC
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292184090142405387305502135335828340484165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:14:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sandonatomilanese.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753007718139930259635855863646778871038281954833702431887933334280830979437838728654165834801306777921339999987805519836091397148100531334832383376816518418128669701791931241512253099959902164888834464427686405810283059733280176803811882672532648607454610385556923828867910256213634532851109878622184052720362475413162710329900961951834611737822043776672605618417598079658131803538184273181015810267180360790697388892522402157551743812503819281352564146309129723737875589001864256854176382981708176861974819777804581454757988976864593488461079433237248357465593463417352880734480703045371463479668586753149353579260667096509758639685313225340359848192433383653241511988334410981991291377439426148522725103542917761944182450584352614878530386210492011203549144371786993178620733332282992429300853451670099971827715916704967441559936503304018909306215243362091756041886869878189407942926150434282734412910060437468656102146842071111778774538935157187775948660591935711551213414267910212058360372589503398699163807005977837424029770840701177190477269658563811354595631085672369397439983012031479658569876074991526397897435374982411919250324445934230205846545854246877840883145498318683335995382673074775608607509977961516951515207958951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9fc4dcd9017a38f2582d2ab6a3edfa7033cb969
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandonatomilanese.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7c4d0ae60000040300473045022100c7d34297d5b50d28983ed4ddca5a065e00f881b7db98e4a4a7543db2be7bff96022017dda0a2c8b5db1668f3041ab2de16cfd5327a859a2e6377ebb784bd48516b15007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c4d0ae0000004030048304602210093260c8c4a6add5b71bcd7ff05804b0fcc96e64aba5e9a7bfe5136ca78abdd3e022100fa977e4c4106c2ea83e8d0f03a776385713a51f0aade07619ae63c577710512d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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