www.contrattoazienda.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e4:b5:09:e9:e7:4f:8a:06:df:7f:1e:95:76:6d:63:46:0c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.contrattoazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:b5:09:e9:e7:4f:8a:06:df:7f:1e:95:76:6d:63:46:0c
Serial Number (int): 426274165127051512214219500948708168779276
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:fe:12:a1:39:44:b1:e3:6a:e1:9a:3c:bb:94:1f:9f:86:fe:4c:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:74:d2:af:9a:12:d2:28:9f:a4:4a:da:21:b3:5a:06:91:31:44:c8
Fingerprint (sha256): 47:98:1e:5c:8c:2d:e8:14:cd:f5:d5:c6:90:a4:d8:c6:57:2f:50:68:a6:f1:53:37:05:34:18:72:9a:7f:85:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.contrattoazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.contrattoazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.contrattoazienda.com

Other certificates including the domain name contrattoazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.contrattoazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyQqNpkIRFa/wfSe5f5FO
6jdk6JsbJ7gXYTFjTiGxAohaiKzUaqGWE3pJ0mM9ZzT3t5uKPPYZjdOOezXppISY
pFhlaiIY6U+Aqc5yHQQ+GtOqLQwg9E2TTy2LEm8nr4WrFfnmEcSVrohdR6V46zs0
Dd9VLwFYOwSm8snFOZlh9U3sj/7EHoCncv4NGs0O52KEL2+PoEuObhQfNro4ADlY
arK1OXj8AKFW6KoSX3nwg3fMW2AS1SRHEgP+QglDRhfmzoIoExBn+77r5Bq/WqUb
lWgidN/Npc6f/o4Sv9wxa+uh8X7vjHsT6QytwblHShmdZTLnq/ndwo6EazUNlg+P
4bVEsxEESGH5UAGH8+ynhPSS1sdfUVRAHdSlnf7W+DisUg/BGmTqYmrM+tZ3mJdp
fmlikrw6X1sGoiWkgizB2VxXjxXCZ2gXBPafUvKYOvDlClB/fYF3kcpunnGBXJIM
vk3az0C+jUBYAfzFIDgeL4UCa5n91z2Zz/3muPoMJqIYM2oFPM/vZqpaovPY99er
mJZudRcF5Zh9mPoRW/QOOaqBKGEZDpFjmh+DQZm1/ETbD32xZEBBFpo4JoKfkIEJ
A6H3bHu7LCRTC7nqely26hBM1ddXK7HXqOPJPJBnjVFAv/hFMgrYoGzLJyXsqC8B
jVZcUain0zRnhNtQX1gN1acCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426274165127051512214219500948708168779276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 10:43:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 10:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.contrattoazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820176636507107250798758711625798303300378772989297536827183956588127413654888980286390276277448578791205956361356018394179505003548099835141868819067017872798178843132263411312946364991923354999288415883925145076228293791514338396058771994520780027094199979688804142989986936915820455232142146492776196997347289165537643308296675578645918669379763289938347638878386318497212228650144405250591345282118643278701363302153198064643966618760512869944558513514523059386566101659546247355999539890653813294005104936211800172864606896830786564163428087547726926287141180488170910988574931211790255329489134204619374269711953770296687600508002888309837418873352360113977779848104045896877964927143388580962424254056419122945391065490738825514459112285250286538185922224253601684996021256118620516030140596648846869160783065793297435913879512242289523210954665520724007605051957792450643625576051003366074925258902902702236789520249668427300741617652394557160368875845452426547502920506351207271654785471045912822150304047960551153310108668879724759862711315697985585811229328791218271263938330349178573040895768510959226348805626197353373296649373657034627144155901641658602941224258678622257866716417153452295016529000568037622281445168551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dfe12a13944b1e36ae19a3cbb941f9f86fe4c84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrattoazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170afa84bdc00000403004730450220401c005545f9e34d27be14baa070b4d728aecf2e5860a2526a34dfc1c4ece252022100a49ff5cf039d612d1088e190160a5d5da60ee8cf613f8baf78a87d93397694d400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170afa84bed00000403004830460221008b8aeb3981dfeaa0071d72c3e8e00e809cf9c89130e82fc277e9f9ec52beffa2022100be02b23acbbb48ca642177c66260097401bb327b92ba63c77e3544e70ebff8e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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