www.sportelloamico.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:79:07:9e:5c:39:e1:8c:7f:14:1a:21:49:42:f8:b3:97:a6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sportelloamico.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:07:9e:5c:39:e1:8c:7f:14:1a:21:49:42:f8:b3:97:a6Serial Number (int): 302521151042155929709018316481800917194662
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 71:c5:2f:53:76:cf:e5:e8:d4:dc:5f:16:66:d5:43:e3:9c:2a:d8:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 55:7f:c5:af:f4:bb:9f:15:ee:4f:16:6d:9f:b8:99:3f:60:d4:9a:10
Fingerprint (sha256): 4d:da:e8:7b:1a:de:1c:b7:c5:f0:a7:6a:26:e4:e5:67:cf:ab:48:79:45:39:eb:cc:aa:a7:5f:cc:8c:ab:49:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.sportelloamico.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sportelloamico.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.sportelloamico.com
Other certificates including the domain name sportelloamico.com
(limited to 100 certificates)
acqualagna.org
www.sportelloamico.com
www.sportelloamico.com
stemcellparkinsons.org
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
sportelloamico.com
sportelloamico.com
sportelloamico.com
chemare.com
sportelloamico.com
www.kadams.com
sportelloamico.com
sportelloamico.com
poltronemassaggi.com
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
www.sportelloamico.com
stemcellparkinsons.org
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
sportelloamico.com
sportelloamico.com
sportelloamico.com
chemare.com
sportelloamico.com
www.kadams.com
sportelloamico.com
sportelloamico.com
poltronemassaggi.com
www.sportelloamico.com
sportelloamico.com
Certificate
The complete raw certificate details for www.sportelloamico.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA3kHnlw54Yx/FBohSUL4s5emMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIxMDU5MTZaFw0y MDAzMTExMDU5MTZaMCExHzAdBgNVBAMTFnd3dy5zcG9ydGVsbG9hbWljby5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDgtwl86idaKn9SGA5vYh81 15X+rd4kcov3HseC6fx6jigWnx4lfL7GohOuaaF6Mgh5z5umrsqKonnPTRh1RrFI YM/OrjCMXqJveb40fd6vh5MyZRKkz5PV4E3i0zABLOfvMsNwjCM1oH+NN30xgZj2 zbCVUB6sT4pjW1ahN9wdNdIwqdLCz7tq+kZzp8yj1FJ6+9ovuNVhgc8BqVGFpRrZ pX204RA1k+Zxp1Jf5UbutPtl+ieK7QMpFnZANhc1sl8Of6fW1pyxhgVBEFz2hK7Y Xwp0k/gbTq2ZNwdltjCXVw4QMgQ6lEozniDj4BAk2b3sZPSEAiM7OJPCJmqj8U0j A6uN2tuP+YX6V7iUhcgL8pKJmHGO4ZLGO+ezvPuXVpNejN+cBWJXBc1VXyyzUqdY Gim1eTLszEzwlSt3/nSVdrHUhT17Y+PpTi/UK+8A+Kytu5KbC90gfGhPTfumw92R eHAtpkUDUr1CR1YF9iFBYDFr+mhpnasUqhRJnK/hygfbTrrRVUMM5iLAHSIb3yNU OodzjsCgwoHSVTLT4KgOVjDTBis6WoOh7/Mxkan5XshCwL6k6kb5YU3B7ZcdbI1L kAUyx1Za9yGYRBITFA8zTbzGaq5olxUgk830MhL3E2JY6CQxoG/FVHq+LQ/4HUwG kALVGJBiezwaiZDuO03YrQIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRxxS9Tds/l6NTcXxZm1UPjnCrYUDAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5zcG9y dGVsbG9hbWljby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKE GHWWgXFFWAAAAW75+jxKAAAEAwBGMEQCIBMw+XprbCe72G4Qc+OpxsFKIUjYVzkP cWwzQCOExIQVAiBwn2LNoo7YCJx/i/3Cm5qLAlC8lMp8Z+6tbHfRUMZ2YwB2ALIe BcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbvn6PDQAAAQDAEcwRQIh AI64QGacRlwsemKWNCEIVsEQksVTFMbrSF7VRY0uXfbgAiBStN4jItwpjV12QjcV ooIMbqyy5/s4PU1ZftKSzbO/ajANBgkqhkiG9w0BAQsFAAOCAQEAGYYrGvmc7lGZ PFq67rI6emjw89vKlLcQtqmeM/wyz4QNpSeRMTEdLO+qluL8sUijxsKS6snRdJgo AfPvHjLxAv9KVnTBjAxU2DD/d8srMowLkhNO7E5/0NIZ4OVkdf2NTIMbx0mVMWKD 7jTSu8ZR3aw3juUor+jgBZ8Vzn98soX/hjoZumPAplwztHzl+YHHoSZ9C0ZGu/wY bcKyQzYN7dOvCdHOglsmqu7JrQcQPVZikvNR1JZepqFy0VnSxsb+LFxARCVrekZp AZ+6Cy5cAkfHxcUTyss66PZiMeuX8h5ctqYz21teecFjXvirk4GfLeSeE08jBnCC rGbzNhh9oQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4LcJfOonWip/UhgOb2If NdeV/q3eJHKL9x7Hgun8eo4oFp8eJXy+xqITrmmhejIIec+bpq7KiqJ5z00YdUax SGDPzq4wjF6ib3m+NH3er4eTMmUSpM+T1eBN4tMwASzn7zLDcIwjNaB/jTd9MYGY 9s2wlVAerE+KY1tWoTfcHTXSMKnSws+7avpGc6fMo9RSevvaL7jVYYHPAalRhaUa 2aV9tOEQNZPmcadSX+VG7rT7Zfoniu0DKRZ2QDYXNbJfDn+n1tacsYYFQRBc9oSu 2F8KdJP4G06tmTcHZbYwl1cOEDIEOpRKM54g4+AQJNm97GT0hAIjOziTwiZqo/FN IwOrjdrbj/mF+le4lIXIC/KSiZhxjuGSxjvns7z7l1aTXozfnAViVwXNVV8ss1Kn WBoptXky7MxM8JUrd/50lXax1IU9e2Pj6U4v1CvvAPisrbuSmwvdIHxoT037psPd kXhwLaZFA1K9QkdWBfYhQWAxa/poaZ2rFKoUSZyv4coH20660VVDDOYiwB0iG98j VDqHc47AoMKB0lUy0+CoDlYw0wYrOlqDoe/zMZGp+V7IQsC+pOpG+WFNwe2XHWyN S5AFMsdWWvchmEQSExQPM028xmquaJcVIJPN9DIS9xNiWOgkMaBvxVR6vi0P+B1M BpAC1RiQYns8GomQ7jtN2K0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302521151042155929709018316481800917194662 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 10:59:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 10:59:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportelloamico.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916757169929577655160895991211897096704870837012185615684215277212508868915513059625147263023361549428890082977152144326833164114265861476347599791408427586511764710852089181048010727991372506942239482580684799354972219747644117901024903156007271136743855549511849131033944913811594641812457013843747752505849338020945690674460069020945148012844759891508517762461183712599094190147644164708243286374560006683845168581098094450716409537636653014508621328779314149977070341695117134369864138439074770351011654698669099974995560723836796337757116937188746704253935249000266339201966012555025898838379859846634623754889557086924948923637239512198992311354349731013796195646337988688878578253418449713012492226156491869417185712421521095260675549091441751251833286971279928733778444737355928017607919794503589305683905107173457642462305320166374898832754893984421488857407042282209217896904294819689036814114592933471090955572111008195053871294754444721268340659758991318175196442392361677267948287765983148998378331039573319220597522993388092504239503802410946943110283362246670372266681234555131325861962642728831439455254258485860068718762660383058582713861607251643273076548967105786076536974385981644628486474773408496814228897650861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71c52f5376cfe5e8d4dc5f1666d543e39c2ad850 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportelloamico.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef9fa3c4a000004030046304402201330f97a6b6c27bbd86e1073e3a9c6c14a2148d857390f716c33402384c484150220709f62cda28ed8089c7f8bfdc29b9a8b0250bc94ca7c67eead6c77d150c67663007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef9fa3c3400000403004730450221008eb840669c465c2c7a629634210856c11092c55314c6eb485ed5458d2e5df6e0022052b4de2322dc298d5d76423715a2820c6eacb2e7fb383d4d597ed292cdb3bf6a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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