castelbolognese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:ce:cc:6a:b6:cb:9e:79:1c:81:b3:99:86:59:53:fa:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelbolognese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:ce:cc:6a:b6:cb:9e:79:1c:81:b3:99:86:59:53:fa:9c
Serial Number (int): 321501436733474703887958639675797438462620
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:f6:db:30:22:23:92:9d:11:bd:aa:d5:b9:6b:45:cf:e5:b5:b3:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:79:f2:80:a8:62:7a:b6:7c:c0:dd:05:55:cc:c4:85:5b:cc:47:b3
Fingerprint (sha256): 4f:9d:89:2d:cc:d7:0c:a6:05:b5:71:3f:c4:43:12:e9:79:e7:b6:c3:bb:11:7d:28:01:e0:ff:1a:58:2f:6e:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelbolognese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelbolognese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelbolognese.com

Other certificates including the domain name castelbolognese.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelbolognese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321501436733474703887958639675797438462620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 09:02:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 09:02:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelbolognese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786106924249259155557637511452327256805433499871686941468135444860247209635719881361581397444684364417425099251270148168549575293454795796024264425303477534604100239396274745190894137964239348679614175948479765885308327922730973052451962994090460243423839992392032080453896987819124523722025878166325294532173544051638692231506026168983239503003578644321086003557880549644196638323282149343921689990360198762848671760586196286047677756134956488022112411997334858160116630853465711861318584975377514787336488580999050333118958915065873173300411548163432419313705997119425509025793037939736186896944067346338072104195509503346690855487417550918777502302635191162210731652640048151943923458181695943748870743881223514151100745660213221519423984346210216836019841555500100823803737147109093250143521532003021108012337408734954037623071117397298472619495262367045309998879621804060686181831989371656503302525628604687845047607820305330769436335651952692648966409132493685827670387303050802855114368961345316503726923557760234249313674936355933069814662990124993711596714533510335995946613295092039639068425373306614331896947583561568373798304764290906387987660698282742610622023005302980945038648477555312390024926671790806668463455896777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ef6db302223929d11bdaad5b96b45cfe5b5b33b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec60fddbb0000040300473045022100b0190162699980a6b230a048d606cfde1423b72ac397134be470aaabf2ce3e3802205670a76d9fa2b0d847ff108352d590436c7bbb331f06c5eec78780d673403a72007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec60fddbc00000403004830460221009efd5d00710a21bd855564666c5c09a3be26af39b37ed9848c975de29bdc364f02210090b6af59b03afaa403aec95b68b2925477469ed2296a94c15fb58512bf7d88e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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