*.sciaccanautica.it

Issued by R3

About this certificate

This digital certificate with serial number 04:7c:ff:0a:52:51:8f:b1:76:9e:5a:68:25:1a:f9:89:dd:cb was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.sciaccanautica.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7c:ff:0a:52:51:8f:b1:76:9e:5a:68:25:1a:f9:89:dd:cb
Serial Number (int): 390983163956750634511348060719870940667339
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:46:cc:04:6b:ac:33:fd:fe:9a:aa:3e:0b:a3:d4:ec:c4:06:47:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:e0:18:d1:da:95:86:8c:34:5e:3e:6e:79:da:9a:f9:bc:d3:bc:ff
Fingerprint (sha256): 50:5b:d7:ec:5e:c3:f5:9a:15:6f:4f:c1:00:e2:fa:3b:1f:83:9c:50:28:b4:5a:d9:76:ea:14:a0:23:bb:4c:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.sciaccanautica.it

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sciaccanautica.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.asciacca.it
*.caprinautica.com
*.com.aliblu.it
*.guidadisicilia.it
*.guidaditrapani.it
*.it.aliblu.it
*.saporedisale.it
*.sciaccanautica.it
*.sorrentonautica.com
asciacca.it
caprinautica.com
guidadisicilia.it
guidaditrapani.it
saporedisale.it
sciaccanautica.it
sorrentonautica.com
www.asciacca.it.aliblu.it
www.caprinautica.com.aliblu.it
www.guidadisicilia.it.aliblu.it
www.guidaditrapani.it.aliblu.it
www.saporedisale.it.aliblu.it
www.sciaccanautica.it.aliblu.it
www.sorrentonautica.com.aliblu.it

Other certificates including the domain name sciaccanautica.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.sciaccanautica.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzX8dXLKGszlFLrMBsls
b75zZuwvxTJIuLoI5MtXce1jMNXC1IuQjtyiy+H3Kdp6GZ/TuDnsb/C2QB3lnb+a
X7EaCdADI0ZPDJW0GmDPTnJbPuPmvsyjMhfVAmdaiah1qjvbfz9Dk7ZJAtjQz0iv
J5/qAHbx7LIL9NcHJmQZgOZxGdFMBrBsQzvMwFwF0X86x7Op/g6CY6AgdCZRXkam
ywBjCej/mppWjqCKjRSTJjEGFOxILP4RHIyfLJtM6D6vYa5vVbGb6Ej76nuQAfrH
M82s3qWTw8k5BQmfe9m+oMQyykyH/QDmGncCLtQgG2lywyhAwaCon2gUX4PGBCWK
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390983163956750634511348060719870940667339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 07:03:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 07:03:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sciaccanautica.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24643091039588000847503972865034099045777972875550281784175683102739300042643248769718220067200002654466352963602696642905448502330521911675377178706156923760427172286987135104615406717139294910956043334780143757034365118401152316448680069163017020406615183867595151736663610657015748782454082976935513813185755307182205663331493214947073966813008688261145549739109766330517146029551453543405984425946781176376716265995908444931585464625144663395347497589251545075204163306268857585552038700091000923647199659354886569597128168930757989286814124698620358247762018357740697477120840751478726930304495896081320693303857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f946cc046bac33fdfe9aaa3e0ba3d4ecc406474d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (527 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asciacca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caprinautica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidadisicilia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidaditrapani.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saporedisale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciaccanautica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sorrentonautica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asciacca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caprinautica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidadisicilia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidaditrapani.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saporedisale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciaccanautica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrentonautica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asciacca.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caprinautica.com.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidadisicilia.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidaditrapani.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saporedisale.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciaccanautica.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrentonautica.com.aliblu.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7f9c1a0100000403004730450220717cc485f128bbd31165e6949a128ef18f134d057ccea160ad483909bf026440022100945a306b3bb729f60bb0e160a7bca6a5c7fee37eea0a667a02214e3c291cb05b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b7f9c19f20000040300473045022100814b1a84827fe3d1f235f37c0ad1f121715d46b8855d346a18a7cc676be9bd5502202724048ae23c38e2a4ab14497c4b71965449b1da1a511da6dae6767fcf98b110
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006997f454693baabb84002a8f47f64e0f639cbc6d60c3344e51be041253bfd8c19265ebd88fc519697e641ea6277f894b656701538a547778ad74b5215b9139bba6e497f316a0433e3a6a1becce36d753634dc08f3c079fb99aa9c5118a021ca799a6c66c0b78360bd886a47d53f8af87baf1a762a606232e22fcc71d7ee991fc36e04641f84ff6d77ce4eb4d47eeb782ac8806ffa4fbc0cfbe6134e558f6bae79798a6eca988cd4e303cb0ef6cf4a30396107c3e5f0f18b040504cb405c8d1dfbe99d568bdf953be318560c99b45156af0d7a9f0a86ff8d860324c9e51f99c0d8f85de6e75b372d9daf4b6d41458001a2ce4e4a72332ebedf4da404c071f57ff