www.crispano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:f4:f1:d1:54:b8:de:6d:74:ff:94:16:94:16:15:19:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crispano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:f4:f1:d1:54:b8:de:6d:74:ff:94:16:94:16:15:19:8e
Serial Number (int): 302836611412964707340019620997264183728526
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:29:d9:a8:41:10:2a:10:91:ff:c7:dc:ae:08:75:be:3f:b3:d4:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:20:36:b6:36:8f:5b:1f:55:70:3d:d7:6d:e3:5d:79:e2:1f:ea:0e
Fingerprint (sha256): 4c:df:66:58:b6:0d:e0:0a:d8:79:50:8f:14:20:63:40:ef:da:c8:95:fc:b4:59:1f:d8:48:86:4f:88:72:42:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.crispano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crispano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crispano.org

Other certificates including the domain name crispano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.crispano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302836611412964707340019620997264183728526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 03:02:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 03:02:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crispano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851403553908477682075211880705794235832359164585937948126082345572349531292124246630841338225752009935134413796594462496841937294861650138488138517379487483116807014772020556664426063638485507765516388202835406240093866419893122522450836411948218307088379298656263622278444390800707929610414059841688173548694744337757134958175363469608058269893339064039080988852907350201167625282145630680253250889235079181793264083119276014296894780645298166704445266046995239148592258008891341526708313610425594478684664416608252859976375138340405089595952702679701238344967785820890082030698892499057140345835267777724377709650319870851488107019778253395507975939617406480743737225079829293182103680772476934101655245157032238734328073752885488607312328276218919773792370494392159552925947268174405631959262820456908959286025968363602672419786384843580612761251049148273587118665369803156820617839621512857091765130268444254419662461509871110565426860191500599131458800449738249860710518091561883006896607192681114384080043051601701918248221830311795479044936408140904518983604409468862520633348099542820365061162546585205924744522139253994667241442828282442320314050676986828480072294152211761509788904105352435085624347327370721687454799752051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3129d9a841102a1091ffc7dcae0875be3fb3d483
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffee9ad390000040300483046022100d2e7ed4a27fc9ca9289d9be9fce79b67532fe59b7079ef31b43f2e7f51caa86c022100885453d3c06ad8505f536195b4ad30875d7d9f78b0e6e6a241717e1cd118bd5f007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffee9ad4a000004030046304402202b67156e3249f0da0a0787c3d557eb319e9dee2ffc935951270d3e2b31ef456102203f264e91f968468f8515b1193bef46d0fc504c47eb05699636de9a0843e196a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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