besanainbrianza.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:26:f8:d2:77:3d:3c:79:17:3a:ea:d4:92:db:cd:50:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=besanainbrianza.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:26:f8:d2:77:3d:3c:79:17:3a:ea:d4:92:db:cd:50:c7
Serial Number (int): 297458591311114080306443016236491269296327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:bd:a5:7c:60:36:be:1a:25:fa:6b:f8:95:8b:df:a0:01:83:d4:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:3f:e0:1f:d4:15:28:ec:75:67:41:d3:3d:71:92:a2:c0:2e:18:d5
Fingerprint (sha256): 5b:2e:e5:b3:06:a0:4f:14:df:66:b8:00:c4:b4:f5:00:c3:56:6b:8d:57:8a:b8:c0:5d:13:b9:53:67:8b:e4:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate besanainbrianza.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for besanainbrianza.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

besanainbrianza.org

Other certificates including the domain name besanainbrianza.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for besanainbrianza.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297458591311114080306443016236491269296327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:11:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:11:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'besanainbrianza.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937618111470268450715793789025459116612903779616558092149140537875161419465695265668228462066351772912926576998294273574108698333527741722429970361218672678065680238205865072755036525943972712276807606583712656570710879341313482337535324982095059593759816324695420774652904062009920537124761661049330829761205602143871299254627865320191120774150696994270706179542497034365418096320399025103621246324017263380175287777738843410009352246699021517482386170289856822572092625113071182746601340216735365002269239361919197938711870707133279849100153111965493809216796073031272402512748182690934801163301722877333767189163883092041681063177341855387329104067460939667179181894622160883478828300309707494004640822445738657804182687766810233226792094927729198395208860936400760858395486650614157406478575213487313213511893060007503553736433866588654861801945533613463348531010449887445218830560683591517409570135451302480187202012494862609711042162489609407245917680190200570716654629149670028734616290059483320750490719707135568801487222407771761885610559551551419388121137648996375728487262382162546582258231888124522261139704702271837801962466338379309947188938163675899565781336949187267067552220478785914971136548582978677623567320347803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10bda57c6036be1a25fa6bf8958bdfa00183d430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besanainbrianza.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016affa440280000040300463044022011e3b873b1a7e9c26be4a5d607dfcd30b1b6ae64f4badc8fbd2413b32c3b540e02207db20a8e7111232ae5b9bc32ecef69792b6ce3f762b28185b92b9cbfe631d158007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affa44018000004030046304402205e605bb9ff055af6ad08eae5f5e94df45a3ea761cca299eb92c63136d41a321f02207f7dc6fe33dd48f6202936dff216fcfa673a278af6d56b8c4e52afd86c0a53c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095d363d23f7772c499bea3796285dbe5064882e81e56036c14073e0a3a4c5b3329aeab6ef6d63c19233e0d354a02fecc1de7ce0d845e52ac2bec2b89c1750cd31269c4b2ef8f1d13b7f5f82cbe53c148b6c9a00c9c85ad31e823541708b11ffade717821a30b23959bdf1de16cca146bc7030e1e7d4225afc650ff497d43c761dc8fe2b653544277adc23073cbc66d29f2fa241bceea2e3ab0a52a4846474e1aff8c3fefa280834d30c9cb39eda35504047c02d42e50570caac1b6856cc608c6dfc19f60778c09bc500bd8d24c77f49fff0ec2c6384acd39a9db5499812cb079456b869b5d980a3b12957d6eca3307b624111a73adfd7871e35cd84af76749d5