www.castelfiorentino.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9f:c2:57:c5:b3:b2:b0:e5:79:d9:46:a3:a9:6c:6a:61:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.castelfiorentino.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:c2:57:c5:b3:b2:b0:e5:79:d9:46:a3:a9:6c:6a:61:12
Serial Number (int): 402812366038351003682313659849647726420242
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 78:f9:7a:91:bb:f7:fe:9c:12:69:35:dd:36:44:4c:74:99:6f:eb:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:dc:87:7e:c6:65:59:66:74:e9:b1:ef:31:39:6b:e1:0b:c9:69:aa
Fingerprint (sha256): 52:89:5b:21:b3:26:d7:70:de:a0:ed:c6:44:17:4a:47:fa:5c:cd:a1:07:74:3d:96:2a:2f:e7:dc:b3:8d:6c:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.castelfiorentino.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.castelfiorentino.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.castelfiorentino.org

Other certificates including the domain name castelfiorentino.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.castelfiorentino.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISBJ/CV8WzsrDledlGo6lsamESMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQxNjM3MDlaFw0y
MDA1MDQxNjM3MDlaMCMxITAfBgNVBAMTGHd3dy5jYXN0ZWxmaW9yZW50aW5vLm9y
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ3Fp/dP8Hllm1NytU+K
UesmCqT4LKgQSdadfPWEfUV1J24n091sZykuBSQOG7SOgTksN2t7dl8D4RHE12fK
L7gb/4zK38AGJcVZH+P/vraU6uaNHDwf4CngZn2Brkll/pCwt9cRWN2S/VvSEpzT
4T1/Ay9Xdu4IZwuyUsuDzHGfnI2F5O55W+P7oLdrWOK4CLyA2JIKdhtcsyng/SZ6
N9d7zDTxrX/wwBC5WewLONn1hk5OBoRrRfWtHuahP4IDl3EbptDhHZV9KWTWvCLa
8qb9NSqeg8ISoT12WwZML+7n3HcCGq/hH60P3LtJ0XR5ipALqfxtDo7aYvHiP8eF
sLBkEOvqSLPyQLzIpcvV2zeyMTBHZJzabBtQLhnLtgZDnRW0fvnv1lcj5wfNript
z5yG/Dt0znqKrfMS+qZMSpgjKa45opgkFQHtxl06bUTAoCTWT68SgtVe1hdYoZMg
uHOfXaMeD9YBLSdtG9r4+FLZpbEVg3Qbmli9nAcE8a76AxgCR3yXJfHWqDW1afNO
lXN1FE2dkTQx9C7cGvvUVHB3iTcZmLu1//8SzbrrsymOOYgjrJcMOKq68ZrXvwTd
8yFyIwgVG0Qi5/MNv0BNYDdwhI0o/5TrRWkzvBSDtEZuBHERhKupbzLOyuqKyhUd
XIJLYRv/KpA8kGlKdJxgtmGnAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFHj5epG79/6cEmk13TZETHSZb+voMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LmNh
c3RlbGZpb3JlbnRpbm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFwEUb6vwAABAMARzBFAiEA9e9pY1v3p6aL3D1I9DdzS3G/
5JxmTCZiduZj6mGCKoQCIADpuKPC2aZ29ne/FNSIsu0l4C5XkSLHppVQKO9pNJ96
AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwEUb6hwAABAMA
RzBFAiEAo+V42iLKHiwaRD1Dd4iZUrATC/BXoUUdjdSYd9xvB+sCIBknOQlTSNOm
033yYnSqL6ZrBdA0OMi0vIslKMnRrhhbMA0GCSqGSIb3DQEBCwUAA4IBAQBddAM8
EU4ucPd+U8nAbNxGth2lDgpjGsvnc2AdP6DkXXJfIl9zQh4bSG52SPu+8AdnNT2l
sfKcMkeZp8BMK1skRfygUh5Y2CgraT6pqiN9Hs3shWoYSYAGOdn4geguHxXSXO6p
GhxULLjB3VSlnuJP/XcEy++CXL9djv2rMFzBnEfOs+XSwl90apIbwlz9W9W3eXlH
q7qz6EZIRV5iJ0VatK99f4uLxTbHxX2xCRb+l8j/jr/FKuREfzDXll4lub91oH7+
3b0l5j6IA//xziDEjprM6GragVL39Dv3+1KbXxBiqkaidacV6C4Vf9j1pl24JySr
sJTjQLkaY56lAWZg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAncWn90/weWWbU3K1T4pR
6yYKpPgsqBBJ1p189YR9RXUnbifT3WxnKS4FJA4btI6BOSw3a3t2XwPhEcTXZ8ov
uBv/jMrfwAYlxVkf4/++tpTq5o0cPB/gKeBmfYGuSWX+kLC31xFY3ZL9W9ISnNPh
PX8DL1d27ghnC7JSy4PMcZ+cjYXk7nlb4/ugt2tY4rgIvIDYkgp2G1yzKeD9Jno3
13vMNPGtf/DAELlZ7As42fWGTk4GhGtF9a0e5qE/ggOXcRum0OEdlX0pZNa8Itry
pv01Kp6DwhKhPXZbBkwv7ufcdwIar+EfrQ/cu0nRdHmKkAup/G0Ojtpi8eI/x4Ww
sGQQ6+pIs/JAvMily9XbN7IxMEdknNpsG1AuGcu2BkOdFbR++e/WVyPnB82uKm3P
nIb8O3TOeoqt8xL6pkxKmCMprjmimCQVAe3GXTptRMCgJNZPrxKC1V7WF1ihkyC4
c59dox4P1gEtJ20b2vj4UtmlsRWDdBuaWL2cBwTxrvoDGAJHfJcl8daoNbVp806V
c3UUTZ2RNDH0Ltwa+9RUcHeJNxmYu7X//xLNuuuzKY45iCOslww4qrrxmte/BN3z
IXIjCBUbRCLn8w2/QE1gN3CEjSj/lOtFaTO8FIO0Rm4EcRGEq6lvMs7K6orKFR1c
gkthG/8qkDyQaUp0nGC2YacCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402812366038351003682313659849647726420242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 16:37:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 16:37:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castelfiorentino.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643653988237770326683549005115295626117829625820340513912642397446709125803853530481822916433144135527972524712274234877562791772634087609495012583310202783435141112742419972787761335546245888572877776889865431183554904907472288941479380348358300171645986305380732146279070007105752213324629706103845615552065048021177532508017745941200959976750317872627133707336825185672992061238422749752221720783421238700984089016320777778908304347651452608549533878338057970490747681739288283144285401021473182555106252866216725528348241505341274713874922444965736395654412658845168022920572019067343363725122186029176649894955934112829998270165659910491319609855846857555397738696446771025184845221433478571640927365567396149551874540507921720716692176389486134644026779098945105462114134075797825102016512540157903479303392467926499981881704462875360209677634371465630350263769079992346365286189156742093168902762177403803260410721441615942277738456329477374811511932573895772224803472292691339305212837786010233897664433533021044032124382175327687135912581206190146503723027852859594259207186258482003673960145191224981770442438711240280096788261691240687815007259858348383942925772945024526069346790905518995406229684293822882147678970864039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78f97a91bbf7fe9c126935dd36444c74996febe8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castelfiorentino.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001701146fabf0000040300473045022100f5ef69635bf7a7a68bdc3d48f437734b71bfe49c664c266276e663ea61822a84022000e9b8a3c2d9a676f677bf14d488b2ed25e02e579122c7a6955028ef69349f7a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701146fa870000040300473045022100a3e578da22ca1e2c1a443d4377889952b0130bf057a1451d8dd49877dc6f07eb0220192739095348d3a6d37df26274aa2fa66b05d03438c8b4bc8b2528c9d1ae185b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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