sangiulianomilanese.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:88:e2:49:2d:53:0b:f5:12:71:75:41:d8:68:f7:1f:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sangiulianomilanese.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:88:e2:49:2d:53:0b:f5:12:71:75:41:d8:68:f7:1f:94
Serial Number (int): 289421961833521341464660410720341550636948
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:c3:cc:05:a4:ea:ad:40:e2:11:8e:7d:e8:61:ba:d9:e5:45:ef:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:e6:e0:b7:11:b0:1f:71:b1:15:8f:1a:a9:15:fb:98:24:9f:28:e0
Fingerprint (sha256): 4f:42:ff:7b:bd:95:8a:db:d8:fe:16:98:a4:a8:ca:ee:30:b3:6b:49:ae:73:6a:bf:82:d6:1c:02:c7:24:c7:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sangiulianomilanese.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangiulianomilanese.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangiulianomilanese.org

Other certificates including the domain name sangiulianomilanese.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sangiulianomilanese.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289421961833521341464660410720341550636948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:39:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangiulianomilanese.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834437111249071031291390528278285051505266112871995497733079379406470156536004684883968001429715644788669668900351263532410293042283454841013503160489193025237544783338739176955284447496629265011666518694834410934618169042132416096843363521906676219872613652247844504915972306654008999410486577745353128380482225565257064126585356969666203969307336749701021261207482930565717704681174312289250177414148306986807477797075556712724936365607152150507282685219874058612892770083948174456100351035932312856826012029055757497977281618437964625160211299281509247435665806165459689210312538513371216707740853852728026372065181253031597759530005384355980086985734028903694600304517729997922173828746716087298007496268027385292252991065007543462559361747275446005644393452169981559463373940369271235740546984049495597197413575331529141228422540202082853791400571284343174706522078160309602680818524179181906434110439228379957626389204490175018796232767818664071878101178977012072950705999378374549240544012742895454432782621563072392154673054411829153081527724419243759085965283030311162424862795349974580078278356118337118198660041042647197768247254137919090267740053399699219796006889542426415604643427366905820598839817282591516966368506929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97c3cc05a4eaad40e2118e7de861bad9e545efc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangiulianomilanese.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b2b0d9e00000403004730450220686e8c26195e091568ac0abbdf4dde982e3c6af99328b7ac3ded6724f8fcca34022100c78464040489820d77da7f7262f38b59b2b816991cd81324d9c7f85319410cee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b2b0b98000004030046304402206b496db1797a2c131ae73c067ddbdd4f716902f7e08fa303ec6f62f11b8dfee502204c6069bb94a774a5153bc67576ca9107e54d4153f64df271b7abbbe027e074f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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