www.contrattiazienda.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ec:b4:4e:03:fa:ee:3b:01:6b:f0:fb:99:e3:e4:c8:35:1a was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.contrattiazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ec:b4:4e:03:fa:ee:3b:01:6b:f0:fb:99:e3:e4:c8:35:1a
Serial Number (int): 428995448439506712742725181814046533891354
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:ad:d5:8e:13:d3:59:e9:2f:00:f3:3d:c6:a7:43:2d:87:7a:8b:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:e9:5b:78:76:c2:b9:9d:3f:be:c4:29:74:6f:b2:96:2c:71:02:d3
Fingerprint (sha256): 55:4b:ef:bf:00:2e:b7:7d:e8:93:24:36:5b:34:eb:09:ee:9c:7b:17:d7:42:b5:c2:ed:fe:78:42:10:52:f1:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.contrattiazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.contrattiazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.contrattiazienda.com

Other certificates including the domain name contrattiazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.contrattiazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428995448439506712742725181814046533891354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 18:31:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 18:31:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.contrattiazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712136406728547008615788099765223694254872124903597271319585369475518926092509249537550428747453694346299557794011934914915434074829748675260916155487893434366501359968947048856802081138381339325670611237165433039465338754678580812914565618256805942552400924041261280342418301930320638748852609960830162344670112583267007217587959748044647625952966154215856423672764745506734720740705480317385285564737120948700513128405598862278883693231354562944535926747241049990807640031310951388135151235766392103475511966563776682634953348346293996684855856992304689513208242703866964022177299783541659570923716659190852296711524121031668923667064807457214390686955666868150253629828614009053770958139159083393517268530147526382031345288801872549730354269775279083680856501322453173898697495235024480751560081492154004150835152315611326761914797014154403244881316548780818729725881141651051908567987011443905286180286118104960126105761769880125691117028993433617677913911211270452633404431585045341623718389168746391049896127619364841794175219559722609568998413528007437083459745740330904262697719766378923025536988271851882033007651723449092974516860865762201443636547252489198133112505707165273861522665866229846462604404254310611427556183509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5add58e13d359e92f00f33dc6a7432d877a8b94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrattiazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094455008fe0b953130b3681b370ef275ebc50844b906a9b94610df211c794dcca17b82340525d166df2c7a63d0e95bef4a39f0cbddbc836840c4542e566b5250a57fbba754b9485c84842e0459050799c9525d4d4ea01e20e120880fb33f9280ee563aa3b2d08eb3ed5ab2572aa523023610cbf262c83e738d3b67a47104e825724804a5f4a279114e5e6519378d2ea672ac18eeec1f7d74108d8d3102c6f7942e909866784ccb7e0b773b8d1ff2eb4d6a11e4806fc6ccf8f479b6f5ce9943dea1eb8fef6c433470d606c49b4ac7ccace24f0c3f0fb2b8b7c41cacd5d3d0e1e58dd11cb6e2a6b89d4c74906aea66c89b8cb87fbb83fcda3422ccfd245d1c46b2