centrogiovanile.com

Issued by R3

About this certificate

This digital certificate with serial number 04:84:df:f9:f9:4e:b4:12:80:ee:7e:95:50:28:51:f6:3b:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=centrogiovanile.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:df:f9:f9:4e:b4:12:80:ee:7e:95:50:28:51:f6:3b:09
Serial Number (int): 393664131942138192832071604511622022183689
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:50:fb:f7:29:cc:51:81:5d:8d:5c:e3:91:40:d2:63:ae:45:c3:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:61:4e:ac:41:92:dc:8e:fc:5e:76:13:53:bd:85:75:c6:17:e4:28
Fingerprint (sha256): 4d:6e:2d:62:b3:b9:73:a8:fc:f2:58:7e:67:8e:d5:3b:65:b1:b1:5b:d7:b7:74:dd:42:0e:4b:fd:bd:a4:4b:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate centrogiovanile.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for centrogiovanile.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

centrogiovanile.com

Other certificates including the domain name centrogiovanile.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for centrogiovanile.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393664131942138192832071604511622022183689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 10:23:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 10:23:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centrogiovanile.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627620120233061086869657010865930987798455823906992426063236471619748913075254649269012538307535345401409680395874872937081226766498683712776167270618824892874493329358535073576210047351711574853236164581548017125159874330982172954499078734368321108728521123890486518308735334039212743279223413875273015466668804129536623226207108436255996874164935376254381854262940517568341171101894028976720084509397312273072763035210014096339881872030564370759592481773475742406600885885590213961786978330721724025123983429085901669668394257419000395066352485737159261858064985872614454564953813615287672314569166891151698760792913939553980422347148579706109492447125122725700625535373241716226679220033034357738111603273725412967076924632335398681438591707828557645793921039423746794043386039953720979032936896024709022347381642473861398495753886779463624014033545847710758441282476723567770442167413388066704724746521856235242879870133132060611538693621220523995928044082055320167784689035262445597884433216919642502285804951602148079416126682675150367740931050860914221998146033345065509392037846570930696468060818230662878479528572297321224860433604332206028246910134412545367815477104042774714628996976559226951781745435521770672166455055243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8250fbf729cc51815d8d5ce39140d263ae45c3d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrogiovanile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e84cd15250000040300473045022027bfff831b5fdec7f468ae95f3008e346172eb8863c6acefb88b6629ebe85a05022100c2db59829deeb4c837646b38f682b805d3b6261353da5232668bb2b3f70b77a300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e84cd156b0000040300473045022100d3438c16419f6a15bbcd0c2f430affcf4a5d13893694af4d1a878a23cb9d542a0220476e05a1de126588216b12f8b9a6c1fcf4bad70f5f13b9c47a25272b22571d5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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