www.contrattoazienda.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:e2:16:ee:52:73:08:d6:79:1d:b7:92:0c:77:56:46:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.contrattoazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:e2:16:ee:52:73:08:d6:79:1d:b7:92:0c:77:56:46:10
Serial Number (int): 336159220742290338647458698491503991735824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:3c:a2:05:db:6c:05:57:df:e0:4c:c3:6d:01:40:ab:eb:fa:e3:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:c0:cb:2a:37:62:c8:6f:e6:b7:b7:e6:08:85:79:3b:b7:cb:75:6b
Fingerprint (sha256): 5c:b5:92:32:d2:04:30:cf:0c:04:4c:09:b4:1a:20:17:50:d4:3a:fd:30:fb:e6:69:f1:a8:50:69:ad:e3:bf:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.contrattoazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.contrattoazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.contrattoazienda.com

Other certificates including the domain name contrattoazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.contrattoazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336159220742290338647458698491503991735824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 07:07:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 07:07:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.contrattoazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669616176626754345711351727527596862178032802501661442934033539546553910885797737686182942462650788951954198956666155115767293277100986857868121516036464636922972470464609684304678544247419397317164785473487956913907498178735008629197006933758188689713035627895507254169107619644058130021309754042071601180358989240371938981721807920852265932853930516554560909786000751852215492204746389756761777480930074359613789887801678701809604664963908018876826914773979684085009389438196600828898636412157837070103903581412546233675601613857977390986110380223020218216805947917563707076840682878561103976842839294258776093139220417562549861854923666506230058642013062000690024355708452384500417832658450056419214642881758984870268071306744104551846104615070139051422233063873698593514140414011832888486810358324671741018328118690139601669067699205069704208888290746217630997336080257353726909302277738025698345581678688494834126051889527436105245091904260304794710703372296916134045537103584785004693858037712228456116806844985535370986951113634646690468024180510617320935887573733223792750449842424235228582544841361642964254531015829315956424040646072784871978809001770435277483934188157008443850705774579753988608311853549134447783000793263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							323ca205db6c0557dfe04cc36d0140abebfae343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrattoazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b92d2f9c00000040300473045022100fed89c2b4cf5c5e3d5dd0b78c8e9a75ee5d59c62de722964201c9ac89821db6202202e04984bfe529a167784015f589ec9bc54dc06f8ca4b8f33740b72b8c687daa700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b92d2f9b50000040300483046022100ee1a8f5f6fecac001c30c4bb9f9ed7a243025e1d2951fd274bb0cc4fff52c8ea022100d845b671f64d5b3bc0ad43024b790acfb036f9688ae66f784da7830b8b43912a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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