nazioni.org
Issued by R3
About this certificate
This digital certificate with serial number 03:aa:0b:d4:79:79:3f:a7:47:b1:df:7a:09:a1:00:61:5f:19 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nazioni.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:aa:0b:d4:79:79:3f:a7:47:b1:df:7a:09:a1:00:61:5f:19Serial Number (int): 319200584910505791677582495821517639737113
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ec:84:76:d5:9a:ce:dc:5d:0e:67:22:86:91:bf:22:bc:6f:87:a5:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b9:bc:f1:2e:a6:33:c2:97:39:49:85:ce:80:0c:37:27:1f:cb:92:57
Fingerprint (sha256): 57:c2:98:ee:1a:2c:c3:e7:5a:0b:4a:67:44:e0:16:8d:73:80:04:af:54:b3:f1:ae:8e:b3:a7:cb:d3:0f:8b:ac
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nazioni.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nazioni.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nazioni.org
Other certificates including the domain name nazioni.org
(limited to 100 certificates)
organicbugrepellent.org
www.directionsmagazine.com
www.methylenefuel.com
organicbugrepellent.org
workshop.software
nazioni.org
nazioni.org
www.waterdepletion.org
infrastructure.world
www.currencycompare.com
www.guaranteedweed.com
visittimorleste.com
lanottescorsa.com
jcpoa.com
systemwerk.com
workshop.software
www.alzheimersconsultant.com
crevite.com
www.directionsmagazine.com
www.methylenefuel.com
organicbugrepellent.org
workshop.software
nazioni.org
nazioni.org
www.waterdepletion.org
infrastructure.world
www.currencycompare.com
www.guaranteedweed.com
visittimorleste.com
lanottescorsa.com
jcpoa.com
systemwerk.com
workshop.software
www.alzheimersconsultant.com
crevite.com
Certificate
The complete raw certificate details for nazioni.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISA6oL1Hl5P6dHsd96CaEAYV8ZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA2MDUxNTE0MDFaFw0yNDA5MDMxNTE0MDBaMBYxFDASBgNVBAMT C25hemlvbmkub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv9G+ a3B+AGRtbXT5RvcB5LTXzGQf6CE3LpDutoVo4jLcc5Eoarswcyr5UZO/nD8PGmV2 pYAXeSQ+FlN+HeUIS11jMN97wLkjkm2DEG8Dk9M2EFrQopPU+nHC6UaElmUmkDLV GuxIgKVeqbJ0goNmC0KnCXldjX68EYYizZ0jPw/PyafcVydw4ma7srwQADRO4Ozh m7GOIDSz3CZnxYOzj5OsmWpBk1LsaRUi3lF9akmPC56CGCvy3J7fjYPLb038uHUu yxeHf11O7eBo6GLdaDBkcPh8kU2cw+DTS6gd/u9IgRedkordfnkhzrM9u0g6LcB9 pVl/M6dYCGp+JDr199PvNtA8jEY9c+fywMkYRRu8DhB8gL9kW075ldESt2jC32QO zJSuhNPKbZQm0ofnj7RrEbX+n+H9SPhCYVm0n88/8pXH+dqX8z/oZdB2FS/Om+IZ e+YB86vKTySUtZCqL7nhIbTwQfb+6zSfr85SOjWpR2jy/DYfJ9atHJhXtR21Nm/q x+/0zU0TPoaWLNoE+87WMZ+MoKJCwRHUIwkkQXMSI2s/JgRzBXjmN2bzIko54srs ckPptq4tRi8B70qmjk23fynXCxNQq/YwUo1266PdVkYmoqS4wm+kLRRSsx/ggZ6s 73qfOdWy2Ll7052rUaPC1SKBjScDBYortrhw0O0CAwEAAaOCAg4wggIKMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQU7IR21ZrO3F0OZyKGkb8ivG+HpbQwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILbmF6aW9uaS5vcmcwEwYDVR0gBAww CjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY/pLcP3AAAEAwBIMEYCIQDoXhz0W0JQ xUs1vXNaV8tn6wUwQsDvR4TGD9lShIFm7QIhAN3y6xMrHNWvYLxN/BBBpdN5LwNV 4bA7cQqDpRw8beZyAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGP6S3D+wAABAMARzBFAiEAryJxsjxrf9Puyy1NFiaLeF6LVOw9fQzhZE1jKyUO r/YCIE7XXR1JaHMyTRCjKxM4RcuVpNHB7rZI4RZeyAWDTkBAMA0GCSqGSIb3DQEB CwUAA4IBAQChfFAoNCk3qjEStvfl9GTBABmUn0ez9QSeG/llJPnoJ3aXzI19Zsjb syUy4U00SMpICeDiDVDw64LkcLnSLDrACYmAvB+B7UOky0DE9a0ydFHJAxf2YC7Z iL6wV5yMe0hHFLPNIVD2frn3SeS4kZ/KjYbbhbq/5uSEnylEL7N7cmjY0Da9qAiT axCUi5ck9Pjg4pXyycMWOrt97X5HHsOdDMJqZyN6hwOWMyR6WK8Iz4soNX0d+zIJ GhDGikOxDNZKIVkscGdgiUdbAUbcgcWg9zaT+ZFRq/p/RE+xEDiStA8ej0QD9JhH p8NBeo5BbdW4ZOvIQuWZWLeKzwxxSc0d -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv9G+a3B+AGRtbXT5RvcB 5LTXzGQf6CE3LpDutoVo4jLcc5Eoarswcyr5UZO/nD8PGmV2pYAXeSQ+FlN+HeUI S11jMN97wLkjkm2DEG8Dk9M2EFrQopPU+nHC6UaElmUmkDLVGuxIgKVeqbJ0goNm C0KnCXldjX68EYYizZ0jPw/PyafcVydw4ma7srwQADRO4Ozhm7GOIDSz3CZnxYOz j5OsmWpBk1LsaRUi3lF9akmPC56CGCvy3J7fjYPLb038uHUuyxeHf11O7eBo6GLd aDBkcPh8kU2cw+DTS6gd/u9IgRedkordfnkhzrM9u0g6LcB9pVl/M6dYCGp+JDr1 99PvNtA8jEY9c+fywMkYRRu8DhB8gL9kW075ldESt2jC32QOzJSuhNPKbZQm0ofn j7RrEbX+n+H9SPhCYVm0n88/8pXH+dqX8z/oZdB2FS/Om+IZe+YB86vKTySUtZCq L7nhIbTwQfb+6zSfr85SOjWpR2jy/DYfJ9atHJhXtR21Nm/qx+/0zU0TPoaWLNoE +87WMZ+MoKJCwRHUIwkkQXMSI2s/JgRzBXjmN2bzIko54srsckPptq4tRi8B70qm jk23fynXCxNQq/YwUo1266PdVkYmoqS4wm+kLRRSsx/ggZ6s73qfOdWy2Ll7052r UaPC1SKBjScDBYortrhw0O0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319200584910505791677582495821517639737113 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 15:14:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 15:14:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nazioni.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782554517613711493585485516012760084715693685948182057727558239407665822854668526697796674974517581949382808646236471854558527306881092215103046466203705445070022389442584308939016609098350981996708109142599112957266040060706323040947279605985616597700893183907195943270266220513671280943957961012460242894095026786416153665852260936196315098154265249296640907551950516102568391875840792668055470484010327433284093614953166042092465832319430828061238720944565674987083320995889109504920408917539157382402509360517682965881760428287330511502807666689396113091235002780180937472729122379760111732650065599293870495935185607875636599695525809362297643754575751007912329211105375443143205863516682209037700364541818069212960629772737925148358483255696267286237083758063295555560496345229875210056570125364464473716121592909795571672502410299636224052246887358590443744340785954826445837030376818887437631557740567517333906975888358807647743296620383689753251144432748279537497021995157401307046584574517253366009036817713069842673486750599603041038638928640850474898457502705221212333433009312615921561942210729105318134225807862404783154137126577678851475578101377239206379941735214923644436002342677551013170850900346005128216432398573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec8476d59acedc5d0e67228691bf22bc6f87a5b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazioni.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fe92dc3f70000040300483046022100e85e1cf45b4250c54b35bd735a57cb67eb053042c0ef4784c60fd952848166ed022100ddf2eb132b1cd5af60bc4dfc1041a5d3792f0355e1b03b710a83a51c3c6de672007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fe92dc3fb0000040300473045022100af2271b23c6b7fd3eecb2d4d16268b785e8b54ec3d7d0ce1644d632b250eaff602204ed75d1d496873324d10a32b133845cb95a4d1c1eeb648e1165ec805834e4040 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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