www.crispano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:d4:52:95:7c:9f:11:8d:2f:0a:08:16:a5:d8:aa:fb:8a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crispano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:d4:52:95:7c:9f:11:8d:2f:0a:08:16:a5:d8:aa:fb:8a
Serial Number (int): 284418001514384971443728536056094064835466
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:3d:a1:b4:af:84:85:05:81:a5:a6:c1:8a:df:fe:88:4b:52:60:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:13:33:27:2f:d1:6d:df:41:92:24:c0:79:f9:1e:78:c3:55:87:eb
Fingerprint (sha256): 58:c3:af:d0:36:f9:bb:c2:9d:50:d4:6e:92:34:4f:6c:9c:e4:01:92:0c:39:32:0b:dd:5b:9d:3d:2d:0b:a5:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.crispano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crispano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crispano.org

Other certificates including the domain name crispano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.crispano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284418001514384971443728536056094064835466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 17:15:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 17:15:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crispano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 945243106878490275344652705055748432618140599044131361493264107172948963766321263020402309486131721889788905983316184928838798016152701013036448373498173698096524736304884533881501345199606045129657896840444931973296461335511584778831880628871187672756846937795500159625968385676002738879587526117644006699349824958600974884201046634635785177771844982714395073788563175749212355394409050892003498609993086763219666651259916845632152209644223297883455997196197382874099796891292550617465010466037271878227604313621770885996753570799914373462264759576141701576120076036271543819249301252431605573550065009112719306290648211132907936919928476942377367126338755418752602160692780323248413101087356927774268565484208432027767441063417897652816329937862181433034974577683790478445510008338778445195161130322790676115423049643935154279095494462601040072392016543119920642349230050068654392331225727928050120488817928463061095039711339845166932355281478127350833691067164464084665727904248444258265072403701591653457772694927977931436317712982179013988138840408183903380955976875140679448127754877549034086419782427000151849061913556495830131359860815061688677383823284518395576051122377448301402472697629066087499926346358630343813090340451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc3da1b4af84850581a5a6c18adffe884b5260b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec7d2ec18000004030046304402202cf345befb94bedcc81690f4876bb766b34e7493ef379cc0a8995894ee77621602200e62c5bfc391414ef028a0518adf0be6f385198dbd238e0fb714072886e21cad007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec7d2ee160000040300473045022100c39543b743fddf65cbf7c3b34b8d1595d54791554e8752f2da1f438098a785f902203ec4f5faf4185a09a65e0cb2e656c595365771349e3930cbaa4cd4a2bf685ab6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00708029a9c4c73b6f107456875b196b949036e7b784ecb8ba52a0d9d102b99acaeda50f9fd40069500568df141a2816ee1b4bf2bbfc5f9903f8336b0664ff19889be96e353975b9ee139a2ee1ec80c2a6b302bda3327c549d702ec11263dc737edd7ca335b52d1e7603df50c193e0e4776f3b9bb3efe3eeeec1da6537a0b93ef36b2a5b37d4c488d61b1b4c7f41dd4db46ce2a6f2d547058a8730473c6e7e4c6d596514a496cb47b6c2f5bc9c773b2e17d087cb3df6e009eb225477bc8fe9f078bb8d177c80b2ae4d2f071ff81d96385ebc2a68112a2a58ff60228c0f4935c8af6e93a9e4197ec27ed666442bcdadbcc037bf5224c75439d6642be270afe60c89