www.curacarpignano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4c:83:50:2e:13:3f:84:c1:5d:d8:7f:8d:f8:59:c4:f4:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.curacarpignano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:83:50:2e:13:3f:84:c1:5d:d8:7f:8d:f8:59:c4:f4:e7
Serial Number (int): 374485148798744651477995423862208258700519
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:b3:4e:87:9c:d9:a5:d8:e1:88:c5:23:5f:fb:d5:f0:2c:a1:ad:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:3f:4f:98:09:32:2d:d8:96:6b:8f:03:80:ab:11:e9:c1:cc:c9:0a
Fingerprint (sha256): 4f:03:70:78:7f:3a:23:a6:56:2c:f3:59:1c:2c:6e:99:ca:32:a6:64:f1:bf:4b:a5:c4:34:73:6c:b6:f9:00:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.curacarpignano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.curacarpignano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.curacarpignano.org

Other certificates including the domain name curacarpignano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.curacarpignano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzxeiqMTXmNM7ot6F7lRi
sXpuL0jVZoHUOHVHMbeLLA8tUFUpu5eLJZnQN5xI1s5aDvnp+RaRAk4fJyC25hQT
iu/czrMjcjIgzZsTYHRpCkAd3GbgC3doRSvdzhjUT0vCQnDz15oJeeTzpMICPHdd
HM3jGN6tED2xEg7pK4EaNwGxSrLnmTqV8UQAAgiTqVKQ24ZNnVNN7mw4QPWWAW5d
QJir+IIaLHU4DcjeNMKSavunR/VvnB9Wb4QOeqBWG2ylE3FHI4HCo3x7SGwkbTgY
xjyg/mzGLKZ34zkin+gMFjiW1Z59CFkBA+/FjcZL+/o1q3+X4uE1PnwCQ23C3MA4
Nxr1WAdFDmYXX0RrGbRl7kZTYKw6O0yVvHszag9maBmgI0XG0yJ9OLsF858cF81G
2tH0HI7N4pck2oTyRsfCzFC1N2yBYp5peYkQ3qZFnfDEAj8eyB62Q/puwVB7CoTz
QejgY1f7iyY4jagKVMcwUE3MWAZJgMAhIKyXb80YvxNyX0wCcUowjhff2niRkHmV
pPO8aRDZ0gCozmPLXEpUloRBxpi6URpdT0fdhTRW1RvKEBbgCy/f7N//50Hwr7oN
vbVlkjQxgFvlnBu7bz5OEzA+FBu493EnaObX1HlBhY/QSEIa1ARH12XXFIRuPiG/
b87H/ojQ6X3K8R7weZPQqOUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374485148798744651477995423862208258700519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 19:48:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 19:48:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.curacarpignano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844862978210101757526434082888642849726109398488903707439700862130727516959541606838693025989589472328765484513254063131117722028891190635141027055293508156211207447559847696857802297139923204619955502505746793480079713770093763647596868886011605428122256963913325478142989892743297491227623980000178894872092928669276787786768389221847413223997277497208833316924427871255537330866905147436769575713104936454352902211338413472079292665750737599597897873393726227449161238032588017090159176156432241397700043689335366826696462778565768214833595801985612737234211648883003669031645519477128291320971385666393542536176436912453981843554208649664122462370327055701831116758164234041220510531880395287850384419231169134921428024503071240989104099073619621607382061099068841966077550673247173785795369035642498676006786112704658740459440908710686741939911802940981229634724692672464415485678041054483884336531452577557724164232910457523393023417462359527977688937012252078019212078611839290772903035911496826455491444259824784482066051377190352112520390865109810344674677880791536057002892249402339168719468977889727150056716865056733473715332291656300139199797383764947241272069624959685394211694818075295771035920490366533316882742683877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5b34e879cd9a5d8e188c5235ffbd5f02ca1adbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curacarpignano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec85f24df000004030047304502207144de3db56018a9f71f0c23f7dbed4b1003eeab23f009718ddb273177d181b702210085c5619b90e48ef93ab7be3ff7456ab844640c2ed1ac3cb357d4d7e39274c724007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec85f24d0000004030046304402207c16b0a80abd4578825fd876e26b2bdc6ad88e88c91b73beaae9c5d7ac7b52b302203d7ae3e71a4367691667f0344e3b7730b91ce39d41e7782b9f7394d419aed42e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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