orietta.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:81:28:47:59:81:9d:01:a0:62:42:3d:e1:a1:1a:6b:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=orietta.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:81:28:47:59:81:9d:01:a0:62:42:3d:e1:a1:1a:6b:49
Serial Number (int): 326842751794574022163889040446119627877193
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:f5:e8:5e:d5:77:a7:95:da:8b:ce:e4:8e:86:05:37:b1:8c:9d:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:72:b1:09:1c:de:41:57:4a:36:5c:49:cf:27:9d:c9:ee:e0:02:45
Fingerprint (sha256): 49:20:bd:35:73:c5:72:a1:77:c0:aa:d7:01:0b:f5:36:b5:6f:21:97:84:d9:0b:f3:96:f8:a0:cb:de:a3:b4:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate orietta.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orietta.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orietta.org

Other certificates including the domain name orietta.org

(limited to 100 certificates)
www.orietta.org
orietta.org
www.orietta.org
orietta.org
orietta.org
orietta.org
orietta.org
orietta.org
www.orietta.org
orietta.org
orietta.org
www.orietta.org
orietta.org
www.settimomilanese.org
www.orietta.org
orietta.org
www.orietta.org

Certificate

The complete raw certificate details for orietta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326842751794574022163889040446119627877193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 00:46:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 00:46:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orietta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944358555427409878747391603873275377422911954973776455768715697621301808742216288116737232791192317585232726942789717427808111832747594752884401648242846678492129726890591120263000568614824584268236817884177185454968105584955253040698405887530501524069494704633208757721866187705915815157330871997936243870149158848946560484682317139004070585266117154567436248633412161728475199092238981931308018328883181719747802212892469454794556859642399174506088256903228119067111986681599743870250522772452573204599113345631519265718545093107137300504356877116417564134882349449156921426551163466922158990220550577062160095808102972216613466229150361579309534320634928776157473035759744595754747867851633044739986338294330924359292671152648684274157301674656824620885318510390334072659288363047102813122728766803742690523183989208704224518171317143199695128103073312340597437234871801477578900573759887231188586430010762962706427195050861257811293327902530959083835929233621115808579321912036894097461095908149258762424424304827386251315770672084230429348634042329099585378946409905124534276568750211734931503914692448934577908330642204046387599693821313722903520339362394373160902520655484401873686456710670538923541976989919864755764133819301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9df5e85ed577a795da8bcee48e860537b18c9dd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orietta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4dd755e0000004030047304502204a81a0486836b0de890f0922fd26289344f63186a0c915edef08333c68facfb6022100bfdf0908b4bc0d1a7ce3f28921e0e640f05c402c82fe81e370f4118f949f053f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e4dd75603000004030046304402203ce7b9d829b8ef83aeab86ed9d4237a6a5dd7f08f6e0db81941fd15f1ced9299022001759202c3d8157cdf59089890020f13d0d093704a1fcd3591eabd2619677a6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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