cerealicoltura.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7a:13:d0:7d:84:98:0f:6c:bc:38:50:83:73:f9:60:04:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cerealicoltura.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a:13:d0:7d:84:98:0f:6c:bc:38:50:83:73:f9:60:04:b3
Serial Number (int): 389989930366868346051968666943403642062003
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:ac:81:22:69:51:52:ca:93:62:32:e1:4e:b9:e5:71:16:b1:76:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:b4:8f:a1:74:84:dd:18:91:c5:01:e1:30:4e:4e:c9:84:7b:fc:79
Fingerprint (sha256): 47:fa:6e:b6:55:ae:52:be:c4:a9:eb:c1:1a:e5:b9:ed:70:26:ca:7d:7e:e8:f5:ba:fd:0f:eb:02:80:f8:bf:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cerealicoltura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cerealicoltura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cerealicoltura.com

Other certificates including the domain name cerealicoltura.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cerealicoltura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389989930366868346051968666943403642062003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 10:21:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 10:21:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cerealicoltura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858902086685053983149672319109588867635669060184431816980412237589137306040570742589770804328004483294713734535782337707190357245030428966144452795906817655657062578585010369070033075885968114476672841076003226052513494954097893367543815760598699965145652737553318093074214178083856659884890610247437903402331004622202499760567291819853900297856079119760547351653445140797818696195210665956256035264656686601138246202951720758509345720529258270559454626467114779287148591473449843766444455961142791161366204971021477085053795921769427378450924871160476918886912531041615112335531730226364468141881473356970304155232706649654124376185320720774567615993058451111547482108777653074803937896590677054070294594735766454651165721872352465017847582872256813946462155130815171639801457806477254251281268262916395833231282568578584470319237252959655043303261873139493094115815455129343457306407594211990550225293752254744815045772693836623450203558889772655155945309126922189121439214187669087345500594636884601969782067134577554727085944455098576105113909249642859839186462349302877371230065765027590723842392837962716853029399801304534743235037868135241472710484814114480724249103465902027117201548445825666574695575266018262497596381562803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1ac8122695152ca936232e14eb9e57116b17619
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerealicoltura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cd434deee0000040300473045022100cfd76aa3099e02f97934a146135dee5c1c2f5a18139c752afb73d5a21330390f022048bc44e2f806617aafd1c411c12c31473cc143255df04b742d7e5850403282c90076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd434e0e200000403004730450220149cd180bf80da76ab709b003c714fddbc398c2db1c3dba9d8fe5a509be1294c02210084581a2f74f918eb70e74fa5a33aa50fd442f261efed6ea158f00b6addfb7d05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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