www.villafrancadiverona.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:e6:92:66:ff:1d:46:1a:b5:b8:42:bb:2d:6d:a5:31:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.villafrancadiverona.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:e6:92:66:ff:1d:46:1a:b5:b8:42:bb:2d:6d:a5:31:8f
Serial Number (int): 342970826092774930273053518732535154422159
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:87:28:76:9d:d6:b3:65:e4:d0:b9:78:78:39:58:c4:53:30:67:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:db:e8:92:cf:42:ce:1b:9a:e3:94:c7:72:59:74:69:d6:35:74:88
Fingerprint (sha256): 48:6e:0f:3f:b0:6d:23:a9:0b:08:e5:be:39:8c:d5:25:c6:b0:06:de:57:5c:2e:0a:50:99:0e:9d:5c:21:be:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.villafrancadiverona.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.villafrancadiverona.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.villafrancadiverona.org

Other certificates including the domain name villafrancadiverona.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.villafrancadiverona.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA21ON5gu0aoOJIeygfHG3
ppoh/jdLFcC+7eCTLLSGqBHox0EZedptmoKV/cO2oCQ30VFEMQytbwMg7yOnCQpS
w71pcSy8tT8OGAA71hH+kgdYOZrDIR6pAD3pMSeGKVBt4ZVZ+zfjGZ/p4sVsqNzg
e42RrWOCQf70B9C6KdXWeh6RNpA3USSvxnqaDfZRQjxJxOTLgKFm8pFW+WwTcGLu
H3Beg4h38DNAw5T2uvyneERilRNS6iqz31XzUqHrJY9yA+0Jsf2IHsio9u67MhS5
er6Q/tMp+kVCcXuzvv1/P3SWZdsG3UPseEXLOVDZGG7ENgWYOSHGEWf8hujAvLs+
sYsya7GDUKO+hpz7rGs+YiHrDjkMLLe83np56tFi+Qkcc0JstQ42GoxLgDzpDKPR
hcohtCyCpghVoFNM1W8vxLrc8zYcQ8DM0CftvDDDudYDVjTtmpOnhImavKlCambd
lDiUZmEe8DdBns2zpL2iveE4/K4IwglkpJuSvc/V0uQi/BqMG5lcMAxibvKqlMFT
NmkzjIuqWiEmGImBotBLdS2Qdp0ScjmJsZyA4d1MlEuYLOfra4Czntleaj4wAY14
XZDqPBOsZajRaa6AcFVHGicIfMq3qXFRqK59eGrrHhB2l9UQnbY7101htew3jGz9
fYbjnWq5oX3rO2tqg/6YFuMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342970826092774930273053518732535154422159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 15:24:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 15:24:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.villafrancadiverona.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894773581246211360326143817976444122677573373535897735113792816096767889906704486356708571149993336971531895535739750225880479344195973836269827348398659390518562615699027418169031536387263057306571670341293983113888749465310325251121958067910850983733385138727100926674268546157192253204667968814361151232923224833668674057393482342207966194004098823808042616254109004285792726411737634731723542453188562400924118319956255724626974260043217434523031316174575891833856468644123894352781855087952636795352979135726109829486209896037527944519648666608407846987455706972538730070345002399394970235522106557719906962733835568978053622208957749990455985891678798852562133484585787372077506526900160310847325820072264174850644464334516964812877667409059864226310789600060184496830350426074980713938844461727748477237401769403996277156584149030833529437808678532470036697636544785121105299566554415706324780097833171188854341768151921258337488346676977927729147434552325255500133676453665629022289103306645829082379296562419785815755365675107764706140504927763254619356148373584038145031553442927730189127896902056934705711174876080287761191969615894174621570488085842569424563859105210362583542610791356780261980450853501738664788837799651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							178728769dd6b365e4d0b978783958c4533067b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villafrancadiverona.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afa1bd3fe0000040300473045022073b16133f2f9e793bf824691ea124d7dbb683962485bbd98f17d3f8eb3635efd022100a6a71298a348f4ff3a6eaa03d3879058c8249fdf287db9caf20abfe2216ec5d700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afa1bd3d10000040300473045022028194054f2330e07ec4edd078cf0abbff628d7569c7397e33ac181cee91ddee9022100fa3772f20268879ba45045a37bfc6ce59a605dd92ca539ea53e0e6d158489e04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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