www.disegnodilegge.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:35:85:c1:21:e7:d0:4c:2e:f2:57:12:4d:a8:aa:12:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.disegnodilegge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:35:85:c1:21:e7:d0:4c:2e:f2:57:12:4d:a8:aa:12:f3
Serial Number (int): 311769791676029743927137827625545117602547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:06:ab:1e:03:92:2c:71:0f:ea:07:84:9d:e2:77:43:0a:10:e9:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:97:a3:79:57:e7:a9:17:87:d7:12:ed:3b:3f:cf:46:b8:5d:7d:aa
Fingerprint (sha256): 48:c6:4f:60:e0:e6:54:2f:1c:21:c7:76:37:be:cd:a8:30:d1:43:50:b3:b2:56:d8:4f:52:ab:1f:5c:ad:64:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.disegnodilegge.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.disegnodilegge.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.disegnodilegge.com

Other certificates including the domain name disegnodilegge.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.disegnodilegge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311769791676029743927137827625545117602547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 05:22:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 05:22:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.disegnodilegge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771958847945435059040127591942994611236701792545518979882071212414630286743647892023687285665519308542423102971255496554108088623752082190377933175148986562444457633444532751518510680054004752208332559968452624768640450035203632322297066771711900334784427058711518386377542656222625678567689314300143101867277791167516224124911132459634318784541954655357426177584871928172725200714475935433104350388287635134503841377762322312499635297612020578656623239859769704462195679763431330662240911671011713265784457840646370752870913745450045869493008941347881360591538980463593090537540559766001576359275795013149366302634560589266296951022049928479586173620371705571812223904857654437780980555162294405175988648012918500341821862660867511857298007541635207767587165464939653994466995318770486827769265004237539270184351044632860126217520485620553488805497724314327386281278071543134255120247522554810327487281179595281241648047258981306362500849476722580759773646823935486239155119089640486964920992401464828393595846184674314385869498438311205671424213782831823787704608964430232668097805698069240439930661303768113093523877783378086548622035482693798780472488921211898453140945979925427772899686189199575115370139602610144883183877152377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a06ab1e03922c710fea07849de277430a10e926
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disegnodilegge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7baf92d200000403004730450220452768b7abdae9abb0466f2068ba21cf21efd63baf75586cda9518034b42d60202210081e4103975479361cb85d0927a24ffdd23d2c13fa203afe7c1eb578298bb8b57007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7baf92c50000040300473045022022931a44fa0a4a8ab65d11b1e4d79ff88d12d5a77faf05cee950d57df109e223022100ab4f9ba75b13309cb12bbdd8fbea928c2c63579a63ce9767915b57bd087b0eb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016dbdce8c342f3ad47a548751aeed2fe8e67b6f07b4a7992c2a6ec5344a1fe765e124bf1959c2c2aacf973941f26cbe395d0ac80e5a2fc84b2f77693cd8f55ba33cd736e4e08f3668aea6f99e7800b21703b3da36222dd0850343d79151cc8263d9e5a9db6482ee590faa646c769d4d87147ad246a540160edd8a7c63cc8981471a60cceb8547386813538ec41481d8afee0c1673bb0b57015c2f2a7bc0e5a0fc8552adbcfa5c72676298a9c391a03c99cda30080248c6c6765900f19a4f26b4d25997b5078db2ca41295961776780da597b3383d263989df53104f362626996aecd88762610b3ae48fe69e1c0a38879ada80a11124a37a94e41f61c8569b95d