ossagolodigiano.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:5c:bb:7a:74:76:c1:5e:f6:ab:a1:f2:35:4c:6b:62:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ossagolodigiano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:5c:bb:7a:74:76:c1:5e:f6:ab:a1:f2:35:4c:6b:62:ea
Serial Number (int): 347211276678163182505169060120960594305770
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:dc:82:90:02:d9:aa:0c:00:c8:58:22:38:52:0c:dc:4f:cf:37:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:59:f2:cd:d3:ea:67:e8:ab:27:f2:a5:97:e0:fa:2a:4c:23:a3:d9
Fingerprint (sha256): 4e:06:b7:19:85:e6:25:da:4d:d1:44:db:6c:69:4c:62:07:6b:97:91:e0:09:8a:49:0b:d2:b2:f1:42:04:a0:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ossagolodigiano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ossagolodigiano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ossagolodigiano.com

Other certificates including the domain name ossagolodigiano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ossagolodigiano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347211276678163182505169060120960594305770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 08:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 08:30:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ossagolodigiano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764138722102599992190044287499547121403824890362416330045447123588884262772253083008056814553358824489470553468034446182315040318864809931530328974642855163380379393796291947914670934749076896364634257547900696399467147448015237454829746567312177256025606880849028008553479083265944649911698632653722394378101142715224290856751268129957583649521257037699396975122610199093408779621714435144802627600908116012034126650839044036847472147428651216640956597587292317387552301399636806712092093193336665967370321339112808017450989915242580984769848395425263896544406885083427280998481471910718796198492658344532085854415812390729500890798023629246488201082152910992864912309197925538030621195663163392677723906859336567447746942150096092515104098436451603994083743298339679568837304918029137373303918788780207988877015824907056181632579471865025741200568690786284601320254554836772140913245464352606448081883676791899668094022287504638154962762470119348813525670206874577720923061520802818072840490548025699588629288950479386011003058207501436398632647047001631090021485245730927787555010054588431856566459215840896833332827338941167507674889444013439847741227885832904645938424621844634957606890833784370222948208255908809353719082866337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1dc829002d9aa0c00c8582238520cdc4fcf3766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossagolodigiano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef971d16600000403004730450220206ab3cb40a8601b7e2e6830eb011a2cfe48916b4288d6907c3658729aea01150221009f1ba6096ebd03b441ac293d25a2581b8fbea7044265da846b0bdcea75f0918000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef971d1970000040300473045022100f4f5974a6bd2f1203b153f296d95bb4f1f8253b09f1b152775c2ab8c0a323b0d02203554ca87e5f3a8338e349a1c6991e59df8cd951a1abe8285474aff2ab0aba99d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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