castelguelfo.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:38:18:60:5d:55:6d:87:4c:d3:81:d5:39:b3:f8:0d:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelguelfo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:38:18:60:5d:55:6d:87:4c:d3:81:d5:39:b3:f8:0d:c1
Serial Number (int): 346141730495988957169070438540015069302209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:8b:29:e8:c5:02:6b:ce:65:19:33:3f:a6:25:8a:25:e8:78:bf:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:e6:b9:96:85:77:f0:24:70:2b:73:e4:9d:d7:a5:a4:07:68:88:e4
Fingerprint (sha256): 55:f9:83:f8:d5:ae:2b:7b:c3:04:e2:ab:1c:4d:4e:3e:d4:14:70:33:01:f1:9a:7b:e7:6f:27:25:97:ec:2d:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelguelfo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelguelfo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelguelfo.org

Other certificates including the domain name castelguelfo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelguelfo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA/k4GGBdVW2HTNOB1Tmz+A3BMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYxMDE3MTBaFw0x
OTEwMjQxMDE3MTBaMBsxGTAXBgNVBAMTEGNhc3RlbGd1ZWxmby5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCmln72yk+6eAhvUSlR2RU6CgR1rsTn
GLQT8OemC0q6dQNI+8v9z5l0BnoJfqXT74qoISYCTNfDanNw5o0hSXLs4tJEm7Hk
p00jr9zK7PuK56jO8dnIrGuktJ2w5Rkna9+SEIxrnZpCcOMfI9vmLwOs7lIZ3Ejy
Z1TTCmKLwPPndnq6MtVPIrInB0T+wyHwxr1JduRd5G09g0aR5eTU8kRfs6Q0GhJ5
Ue9Ey3oxauIJz+Sv5prS8+112QXW7xal7strxPL+c1/QSPShysWwi7clqRzcoQhA
9CDM7uolcGHYBj7UmANQQyPGuSSaUTxLs+vwzGxCY2ofhniJHK9/Pf0X0mpTudYf
tHd+SuWlfpqAq5FikqghDV3rvUg3EsCLJa/WTnJn3en3SI/H9zk0BiBS+5To2c99
YxwpNItiBNs9oQRMdAI+GfGakabzDec4PzNs3CTmEhxWRep9Ckyd1UXe+cUh8cSf
cKYXer/q9hbDR9v51davRF+xACHQrO+eE86iW/8nDJhJUTLcnnap5FV2KY63uspw
SH/D5WKKL55z4iDke2qDv83zHpFBs/jSRa/4IWlmobt13hIOAV9Q3o9CuAsY+KO3
dTDYmY1jEnS9ci71Z1oy5gzm9/J0ac3PO2rj7xQw+hmBOG1XH3cx4kpzp2Zk4lAQ
sIyg0GYW9lIeRQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRw
iynoxQJrzmUZMz+mJYol6Hi/8DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGNhc3RlbGd1ZWxmby5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWwt
/72aAAAEAwBIMEYCIQCQBdpWZ17/62BN0sdRZz+JDVLKGwxHbU77eqHA6nLNVAIh
AKoS8DUsHN7ZEqajcch6SFtH/uFt035C/OCZvxu0V3DOAHYAdH7agzGtMxCRIZzO
JU9CcMK//V5CIAjGNzV55hB7zFYAAAFsLf+/cQAABAMARzBFAiEAvn8T2aoMT3Fi
i5oNl/Rv+9gqRKPMp2Cgb57GuYg3HqwCIGql+SmcXdZ5Wa0RgMz7RFVnv3s9ZYzx
xF97T52jDgb+MA0GCSqGSIb3DQEBCwUAA4IBAQA2PgkapABB8ECwb60lCSSZlXOH
fLqk3PbBoGtnUEQaikXZJMe2mdAYzdqyu/6/XnFEqZcCMZqfChZVTfXxP309m/jv
xiMpi12G5TN4vmYvm97Fq8NLmXTjvAcusAvqcRuVKkox0hnT4Xfp6fPWFccDCd6S
wcOnzflpyEXqpWYfVEcqunmgT4BnOhNGQFcl5piKhhMAuhR3p1fo9mBw6g6b4NYS
qmSWYI2qEBm/UBqHsc4idU7ILSyYx2ZXTHxmz7qoMlF50tsceYVzym+y6q4pOsi1
1hAxaf8oKhSKXrqJmIcol/2+9bYi7Go9AkAo793kbdcI6xmWbnyqSFVpVaJo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346141730495988957169070438540015069302209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 10:17:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 10:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelguelfo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679619235302350123236302325454567455961088849987182596502735251829228256877292289967196417150197472206658037484945277297432905197315503569471132398532327021429766044830682508099194633220171951974322187473617630428608454897525616461785929294880874714428165643463087806879652944374600549431584615865815887776323116714171322261704036735826482075129470372304717650072783284972611166254831773774067025722681658921609915340854068935769949008663033186082615924466354210849899498352095202883195813746621190558629852820958900575987367833795623557543761215360793704154937722519331352691244178303938529513134165777593765217552754968330333988541512797260159420683029152309151989243549690123604954391651880166315561131053156224274930409276052589415747651113521447209845021677327306701472880685951630599587858323169704569566882847005272012588411107827842030787340156786753017787841020790107417546362109846477091996952255277891064425928479315772498825157816511517732930083638074510945771633121181798080172578046406704496272177847535953756454672338009172435006305171294626872030927516815012851537243072439148578173349019255741642177814101295624477699923925424123481768769430246501983078946867338022006368242699397191276169113864698902082241766235717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							708b29e8c5026bce6519333fa6258a25e878bff0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelguelfo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2dffbd9a00000403004830460221009005da56675effeb604dd2c751673f890d52ca1b0c476d4efb7aa1c0ea72cd54022100aa12f0352c1cded912a6a371c87a485b47fee16dd37e42fce099bf1bb45770ce007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2dffbf710000040300473045022100be7f13d9aa0c4f71628b9a0d97f46ffbd82a44a3cca760a06f9ec6b988371eac02206aa5f9299c5dd67959ad1180ccfb445567bf7b3d658cf1c45f7b4f9da30e06fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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