www.acqualagna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:ff:96:35:ad:44:7f:24:9b:fc:a3:e6:4e:15:c5:c7:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.acqualagna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:ff:96:35:ad:44:7f:24:9b:fc:a3:e6:4e:15:c5:c7:8e
Serial Number (int): 266100261637402253532266167536571755382670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:e6:ea:f4:3f:5b:a7:8d:de:fc:93:b1:cf:ba:eb:98:e4:b3:46:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:6b:36:e0:37:86:d5:3c:86:44:4c:71:9c:3e:2a:70:fc:e2:2e:85
Fingerprint (sha256): 44:f3:92:63:f9:54:62:80:8f:21:b0:ee:28:e7:0e:22:ff:91:08:b3:35:18:bf:af:db:bc:66:91:58:b5:19:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.acqualagna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.acqualagna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.acqualagna.org

Other certificates including the domain name acqualagna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.acqualagna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266100261637402253532266167536571755382670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 14:50:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 14:50:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.acqualagna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874384571869505078816342822691026506114775909265263004135885368303242415266771663880657871270467693104666236377258470534235931705225988517036658181634888734039830332340566384570926090669145603292667181583612831640630975985458651971797131175588948016054217704937409556425117136379948019137275562719092154277296388981551856477854220990339145811166405951655077518317996214719870096238668958356988591641768388658340265464220237883724046872640948405013685664212718596258867085950450804898074604209425406920258142171870573435383327247709190724506757174715828433120989989663782610065652775670005068339264525218180950730267672869319186093561929654251443866276551579068746176475447816006625476196521558670941726274972624770211344545776284546829436728770194559406803576718622273723615183627095822783670323060301576121916408247926861838273336787013018052582640115313312510250293489039773143234384616012375548971621126189956060775451313931053408304793627060438231800119015794589247405990850428494343695181507125375506482776328326818225448856449902080778226186634739173063156817835518429266702127478564811875199938231962463289201135104412273882337676737813433458563748625012920942408017960552506873059089610277646419518936480045545625040485539023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fe6eaf43f5ba78ddefc93b1cfbaeb98e4b346cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acqualagna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017131498b430000040300463044022020abd87cab43e5c1fb42d510c3c14a2f5c8e5420a4b377271d01446991c8098102202952b74b52ac8ed2fc34e811c9c63c8b8df0c534d65092c02cd50c043dbba757007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017131498b3c0000040300473045022100f5ad02d53a293b4319133bcd3b2d979dbce634d0bad48605c1c5b1d949307c11022008c0568c1af895afa935fcdf5c3b6f5a420ee24fada94d42d0fc11c996bda6a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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