reggioemilia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:fd:bc:f4:d7:fc:57:c1:67:ab:8f:db:ef:a0:06:96:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reggioemilia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:fd:bc:f4:d7:fc:57:c1:67:ab:8f:db:ef:a0:06:96:39
Serial Number (int): 339598795620938730880348120159589828564537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:b5:7a:40:f5:ca:1d:a8:30:f2:4a:11:d0:f9:ae:3c:47:3b:ae:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:33:16:e9:e0:2b:29:90:5b:f4:d2:ba:ea:2c:6d:f1:a0:44:e4:a5
Fingerprint (sha256): 53:14:89:6e:ad:2b:e1:15:98:92:80:ff:80:99:0e:0c:f0:5a:9f:5e:a7:a1:c6:b2:23:db:9c:48:a3:be:d2:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reggioemilia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reggioemilia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reggioemilia.org

Other certificates including the domain name reggioemilia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA+X9vPTX/FfBZ6uP2++gBpY5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgyMzA4NDdaFw0y
MDAxMDYyMzA4NDdaMBsxGTAXBgNVBAMTEHJlZ2dpb2VtaWxpYS5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDdGFMb1MmrxEZ0nqrhe5NKfHCtCwX1
91dOaAMriPEQrICYN5dodUVcYChvpRpo1p0jEsu6qzmpIAkuTefL0bDx0hk9ajTm
lgL9G/3x41dDt+dLC2KzA9H95ejwbk99jJxp+T0lHYHHQRcTI810iLqQlcKwhOI+
sxdfHkE7lVsENJ0vtjIHBgVMPz644hHHbF6LVdJGewza2dS4mHLS+tuHrwQqn/qB
3R8K/fZa/s7mCbtjaK4NRwA75EnZ6oLjNBeMFyoah8dUH9UAjPUWu2BHM3QnbUoK
50g2V+yNqqd9MNPkNLsmPT4GLO1q81VUdGpLNm+xraqhp3BiF9vyJlc/8akUubuB
9kcfXGoPVsARZtzrNATn/wlHTicMyWqRJKLcfuh3PGVOzlulMfq4eQ7PUBp0XObk
lfnrYhdL1cr87rD2SMgqnQJr+2Zr8myAqi8NP7MBIGk81Fi7S/ZrIQLthxFAqqf5
oDWKPkfUjESDfts+PzvRMe8gURnpWsjKYRgR9Qxangs0/csy5huuzog+BOToO4dz
p9yufgEpyza3lXOElY4FeUGwpKksSJkA06MQ12VyYomJKuKk5CRIUS2jYsU1nrsI
tQEmlQZPm4gZ7F3bzIx2Jp4UVXrk2BgtPe8T43NXYWhc5KQ3S7XfENJmtQ++yaWv
bU6JPzTFSccYkQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRT
tXpA9codqDDyShHQ+a48RzuuuDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHJlZ2dpb2VtaWxpYS5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW2t
2MPzAAAEAwBIMEYCIQDDUYQT0cj/P6qOLwVDxSNyUDTIKbFE+eVI1xoTEHwG+AIh
AKafZgDC3L8/CCmgxhcQ0F8F02SlOxiZPWG8Gduvsr/8AHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFtrdjEJwAABAMARzBFAiAi2N73PLcjlp9N
9dMN8aPLnDFSrovrcnecuplr3KuB6QIhANHCeg6C+tXeC5ho/QdxjUXkOWZpkG1l
JhJ1j6+/36XnMA0GCSqGSIb3DQEBCwUAA4IBAQBMmdD+DhsI62ligO8p8e7G6Flh
vwEQhHwoE2Hc6Z9SJ7Ijre0z9e724X6feQveHLbF4LYiNXMf0531YIKQfgH1Ixy1
OOew9qvmwmVJd6cRQSJqizpTpi4oEVMwFX+SXdf9+ThC0VzBV8/igfdjiO7UWMbs
KdDaBDo6AJ6zPix49aFWOFgAqgE0KUBmA911E46QesUoWDetmw8g04lu8t4DRzdi
V7x4R/QhC2H4Mu9F7CkvErfb/PzYmj0t0NLJj4i7ddHyp0jkYgum76pwZ5JI8jNY
CGzsBu2aUbhybJ3j/Y1Sa7i8kyuPY9DMqs1vXhVKOXtgzRA8770tyTmu9iar
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3RhTG9TJq8RGdJ6q4XuT
SnxwrQsF9fdXTmgDK4jxEKyAmDeXaHVFXGAob6UaaNadIxLLuqs5qSAJLk3ny9Gw
8dIZPWo05pYC/Rv98eNXQ7fnSwtiswPR/eXo8G5PfYycafk9JR2Bx0EXEyPNdIi6
kJXCsITiPrMXXx5BO5VbBDSdL7YyBwYFTD8+uOIRx2xei1XSRnsM2tnUuJhy0vrb
h68EKp/6gd0fCv32Wv7O5gm7Y2iuDUcAO+RJ2eqC4zQXjBcqGofHVB/VAIz1Frtg
RzN0J21KCudINlfsjaqnfTDT5DS7Jj0+BiztavNVVHRqSzZvsa2qoadwYhfb8iZX
P/GpFLm7gfZHH1xqD1bAEWbc6zQE5/8JR04nDMlqkSSi3H7odzxlTs5bpTH6uHkO
z1AadFzm5JX562IXS9XK/O6w9kjIKp0Ca/tma/JsgKovDT+zASBpPNRYu0v2ayEC
7YcRQKqn+aA1ij5H1IxEg37bPj870THvIFEZ6VrIymEYEfUMWp4LNP3LMuYbrs6I
PgTk6DuHc6fcrn4BKcs2t5VzhJWOBXlBsKSpLEiZANOjENdlcmKJiSripOQkSFEt
o2LFNZ67CLUBJpUGT5uIGexd28yMdiaeFFV65NgYLT3vE+NzV2FoXOSkN0u13xDS
ZrUPvsmlr21OiT80xUnHGJECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339598795620938730880348120159589828564537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 23:08:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 23:08:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901988979216967286875993528288500782357353751578628843108143390041693211746411600807368334372362144745727238270027536323023870494532669869136809679427553064272663125586759092495602856615102282352129544177806138313856447985890107536822743722550928139589501729936493821937858497938410122149748962440911721902683889256759241378190810259312533306862558151493569994673215920821159713775845938074592745928762606864116615399334482824374096778144397729185954541131220276386766620989178335983015574803840350890642655533559922610344769022828745812308798939298195466686143580991517834165895003399509621036705277342576302147824983475292179677473606048551085232350967242777904046049377448176244588245315993532869556870014348783882680975391836458337461805490674590572517691784025186505205961330117792856185928854186336474739583519149941371671831621763960484875450862566897999733408123193523297689567566722784986195156386862004295183389755560337169033461000593320311211171016645725726288759644214875129628096387559476740770632550716358536693077252301211867984319339636662715670510869122032993149084307041775385814282185540360289151474685563538011273945786564815770459887772844216681405204233985901710706803504595948280927256317583632164224632297617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53b57a40f5ca1da830f24a11d0f9ae3c473baeb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dadd8c3f30000040300483046022100c3518413d1c8ff3faa8e2f0543c523725034c829b144f9e548d71a13107c06f8022100a69f6600c2dcbf3f0829a0c61710d05f05d364a53b18993d61bc19dbafb2bffc0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dadd8c4270000040300473045022022d8def73cb723969f4df5d30df1a3cb9c3152ae8beb72779cba996bdcab81e9022100d1c27a0e82fad5de0b9868fd07718d45e4396669906d652612758fafbfdfa5e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c99d0fe0e1b08eb696280ef29f1eec6e85961bf0110847c281361dce99f5227b223aded33f5eef6e17e9f790bde1cb6c5e0b62235731fd39df56082907e01f5231cb538e7b0f6abe6c2654977a71141226a8b3a53a62e28115330157f925dd7fdf93842d15cc157cfe281f76388eed458c6ec29d0da043a3a009eb33e2c78f5a156385800aa013429406603dd75138e907ac5285837ad9b0f20d3896ef2de0347376257bc7847f4210b61f832ef45ec292f12b7dbfcfcd89a3d2dd0d2c98f88bb75d1f2a748e4620ba6efaa70679248f23358086cec06ed9a51b8726c9de3fd8d526bb8bc932b8f63d0ccaacd6f5e154a397b60cd103cefbd2dc939aef626ab