gev.twai.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:d7:c6:dc:dc:2c:f5:a2:8c:c7:7c:ff:20:e2:ce:51:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gev.twai.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:d7:c6:dc:dc:2c:f5:a2:8c:c7:7c:ff:20:e2:ce:51:50
Serial Number (int): 284762875319350525115309820715167560651088
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:7b:59:fc:cf:7f:ca:5f:b6:e1:cc:ed:f7:92:a1:65:74:7b:6b:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:ea:0d:f2:05:6a:da:05:53:8c:8c:55:80:99:0c:44:65:d8:38:06
Fingerprint (sha256): 4b:99:c8:9d:11:09:b4:4d:79:fb:16:3b:df:d2:10:39:40:b1:a4:1b:bf:22:fe:0c:5f:1e:45:54:4b:4e:0c:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gev.twai.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gev.twai.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gev.twai.it

Other certificates including the domain name twai.it

(limited to 100 certificates)
gev.twai.it
gev.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
old.twai.it
tcc.twai.it
gev.twai.it
tcc.twai.it
gev.twai.it
old.twai.it
gev.twai.it
old.twai.it
twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
twai.it
gev.twai.it
twai.it
old.twai.it
webmail.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
webmail.twai.it
twai.it
gev.twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
twai.it
webmail.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
twai.it
tcc.twai.it
gev.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
gev.twai.it
webmail.twai.it
twai.it
twai.it
tcc.twai.it
thechinacompanion.eu
tcc.twai.it
tcc.twai.it
old.twai.it
twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
twai.it
old.twai.it
old.twai.it
old.twai.it
zend.twai.it
gev.twai.it
twai.it
twai.it
old.twai.it
old.twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
twai.it
twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
old.twai.it
gev.twai.it

Certificate

The complete raw certificate details for gev.twai.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISA0TXxtzcLPWijMd8/yDizlFQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjQwMDA5NDNaFw0y
MDAzMjMwMDA5NDNaMBYxFDASBgNVBAMTC2dldi50d2FpLml0MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAxQ3JERyyB/KwR+yBYxSeaBfSd6b4z3AtWm7U
csw7p0uAjElYsvPvOBDV0orV5a3XedZwyMOnVfIcnlulhkozksyDKW8xgMzv5kIC
ttQhG7ZJmzfOB8FeSLFEyAJa4DWVgDOeSnxm7vkzcZ4RbUR6AGdu+X1jsL5nPgfE
/8kQ/80gpsVZg47S4yVMVhQfLhsSvB7xw4yaFaMcjPgs544e+w9hnKlnLCkj916p
C1os3HalgNyy1DHlM4oUITIkzeAtRDDZKTwpQ4YUx33E/0qISwJRnRjnbKfDK0vy
mD1aalwuBnccNmK/2dir/SRPDnl3uyuw+y5cedzzf9LZvaHsovyt8aVV9rNQF/54
xK0693tNlSPknN3aoDgTgh/Ajoj9FQuM6LzPSI72kRtfbBZCaMncgqg1GpdJHK7t
VPrvNkVHFjgKQNe6s0OoW05VgT0zrlEduHWp1fOUX1Gq868dSWJuLXAycPjYww20
uHSfwLP19Ykyhhw51JOxaNUZXz+avV4BCs+5HJ/j7u6epqhPe61wt4mCa+ZzngRV
4ED4fRnfPA/191m5l0SAfKq2lnyBDBg/+PAa5XFXyfFxijeWgozDomdR4O46kcwL
Cs08QGiNicLbjF92WlIxlYFD+9UWFVdVME7ZudoMIbNQOXH97kT+D8dvjqCBgLZr
6mTrAjMCAwEAAaOCAmAwggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUEntZ/M9/
yl+24czt95KhZXR7a1gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtnZXYudHdhaS5pdDBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbzVz3r8AAAQDAEcw
RQIhAKr2qq/Hr9mt9ejhibVDmZhOUcIt4eiB1IqM2VVfFHEkAiA9DtOzb9Oqoyuv
jHDef2Mu1JoVSR2n4KHYyXoW25vTXwB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq
7rxhOhpp06IcAAABbzVz3vcAAAQDAEcwRQIgQjrrQrohalEWEFyFoN5VxLx9+JnN
cHmg0bof8B5HwbkCIQDTt/E0yN0bHGy2N0PhSXbXV2bi4v1+Rlw67dpcfKAjpjAN
BgkqhkiG9w0BAQsFAAOCAQEAYrZdSyU+px0giKAxV4skqRKVHhCSSJnvfQ+3MW3A
7WAyHHWS2aktouQ0mP/1FkSlxxbqUjeyb2Bzisglxi/mDcYpwWYuWsHA0Qq0SOuN
PXC+ZcnxMBxXIzsJD+EJkgwRYHeBaQNNQApDBtPol5fMckOoa9oFv5ig5zG9xt/9
1Vg4lmpqJWgHV0b9UnuzTaxmFuH3yhh4RXQ41rcTzjNZAl/PpfV4xHeWV6WAgLJo
s6E9RLWTzaPjDXaZNHif90hMrA9Rep86iK+upSFwF7a4X34Xg4+VTCMmQDwQLjd7
7giT8bCys483S0e9KD1InqpINNtjIc4uwCqpEG3Wh8GKFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284762875319350525115309820715167560651088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 00:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 00:09:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gev.twai.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803909567322453570250800199968481782872223396484572347723744000007485417958396996435787066793567442912119885268537045362358204636831973538445950899386712043710716358415676409113335614357142699524038113442426687978395972235509806062487183305400205861716689887996178132812927799587884520418681776119035443243528840550591157000776878253858351221660565351185685021116061589964590095002150742664152189571414716462543549832036759267752086318603778466375336322978024979230381065170182828412370329766532221963532641165703877213993428833649960505368958596989149542467650541635070709985305027718483678418348122125950301991334409648803129374651101227643134739259465922945341910749227857418040939216842055480195720635846009706182257334184013315983866598460328159826427521241535861063238213552932127036045589057702718923833895275319854807662491841395807393156368408496347165423249307640193167656414981578999647518115513286959866155459872407594334372070893808986406279996030456922062780051293575352049380973255369615269679368154410542789783386486375945379312728437325396701249625916706308665767256508163308725706736761548851684125775415932277712856026144166099615101026211732962864543303410933730759275228857523357137613112469940838720056851104307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							127b59fccf7fca5fb6e1ccedf792a165747b6b58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gev.twai.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f3573debf0000040300473045022100aaf6aaafc7afd9adf5e8e189b54399984e51c22de1e881d48a8cd9555f14712402203d0ed3b36fd3aaa32baf8c70de7f632ed49a15491da7e0a1d8c97a16db9bd35f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f3573def700000403004730450220423aeb42ba216a5116105c85a0de55c4bc7df899cd7079a0d1ba1ff01e47c1b9022100d3b7f134c8dd1b1c6cb63743e14976d75766e2e2fd7e465c3aedda5c7ca023a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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