www.tecnodesignroma.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:50:90:d6:a3:ed:ba:08:64:97:49:62:3e:3e:75:9d:5c:f3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tecnodesignroma.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:90:d6:a3:ed:ba:08:64:97:49:62:3e:3e:75:9d:5c:f3
Serial Number (int): 375864256388504232271739869059900143131891
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:f5:a1:ef:55:26:e2:5f:50:2d:40:89:3f:5f:d1:0e:aa:b6:6b:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:66:c7:bf:7d:5f:bb:67:95:78:ee:7d:bc:77:79:9d:76:03:0a:5a
Fingerprint (sha256): 45:19:47:1f:01:45:9d:eb:2a:30:b0:9e:8a:bf:de:0f:94:9e:64:c0:40:29:ac:4c:7a:ac:69:d9:92:ff:92:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tecnodesignroma.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tecnodesignroma.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tecnodesignroma.it
www.tecnodesignroma.it

Other certificates including the domain name tecnodesignroma.it

(limited to 100 certificates)
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it
www.tecnodesignroma.it

Certificate

The complete raw certificate details for www.tecnodesignroma.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375864256388504232271739869059900143131891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 09:21:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 09:21:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnodesignroma.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989487918646255089574667298177273325449261898304984078992631096426625882283747734483525287277348307135877522275583646579053646633002419939773655973693721269523523275643404806388582267597950200596135558408859309702749361783603010830054514292323428123506734538780231821390478635889812477301400051705200307312549720465172975842119625666015616342744446976359778977757278912191892270996456668361554515083818789663227896850514594795813221098764384962486531968029735828372976874893987790328177527458974172120230132363894867877039426135011434257646652984073915115598248740671469005103520726884408891193820023072431003882180767746309952368944512083376506878689339038527874555737319843115635034389273640216092776909155485588605222353768000867734970183363097892053258017126367038489313872340006737846265798119879698701660867752807291378479436498534400903681744415685396465171651952488555228179386330428861677801100564977401860253262364706132362313465494321098866208213693600332621644833874158721427801796361002266552991629063234932461233397290549502601905198176344935337489510243549504468328117457519049806322161312166083947156799445000592762036529158219833444348790459978483010050087598385905067208690087715343419929877668354864326424053130981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60f5a1ef5526e25f502d40893f5fd10eaab66bcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnodesignroma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnodesignroma.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170ddb633e400000403004630440220594bfef719651f1644f85270e52e05882e4db87be678543e763aae1f7e9667ce022002d174c7f9fe90266ff09cfa487ea55b9728500193ce828425a7d4fea04080d7007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ddb634130000040300483046022100d09ec8a83d471688e0e6f18ca2a1764e05bf90f5db7b2106b45090c68e24e42f022100f38cf718365b0f5eae70df4283ee681f20b2c012074aec7affa5707c5bfe66a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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