alaggia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:61:86:5e:76:b2:c9:df:44:f8:1c:fb:87:97:04:49:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alaggia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:61:86:5e:76:b2:c9:df:44:f8:1c:fb:87:97:04:49:f1
Serial Number (int): 404725367068316771864664436975628305320433
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:b8:54:d7:76:6d:77:d7:34:30:7b:89:ec:06:13:99:82:ff:8d:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:aa:ab:d8:4a:ea:e7:18:53:ca:8a:86:91:f4:35:cd:59:4e:b3:2e
Fingerprint (sha256): 5d:51:56:a6:ee:df:49:64:b3:9c:b0:12:ae:b0:b4:30:6e:06:51:8a:5e:87:ad:46:30:e3:fc:39:72:8c:74:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alaggia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alaggia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alaggia.com

Other certificates including the domain name alaggia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for alaggia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404725367068316771864664436975628305320433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 03:39:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 03:39:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alaggia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791191554629509101816703609739952239920573260783464801829503541206521807262942482526224287841688184759102892924839305290289912752594245756309015567156013257211638520360986864736064660704237445140563439555759654489757438789735232922872306580862831359634004383415876172549543215807748164581282099844022040539002728568524325753883249952670524007073815486625598581173750461503538614628028002239940193092743634564593405513365457623849608719652475884053350843437783922780729623037636437320637209451512321392456527738869843708761874468882247323551671687862420388854354119209192754890961603245921508349344114077814592358725988286284681984307149667822324993163613198269289443933369244032375613678168588635944333933381983150418854228868916895663550115044228014819601881068852287324677245608731048107931579866115464732797250888107202961822553632992905599879794758025844534741156369896000140618129048895627128307832789816536673615419345241118205964682114580431022349970764337277782421870364147342231880263083278483964945274973144154614547181308557602089185888307192231470272668355396958560764378777419632392984421185292287851844485341835470031984036637983186161787738221153186296138776506634155518139630886288596318388121536170006585561075566367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b854d7766d77d734307b89ec06139982ff8d8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaggia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001681202c8aa0000040300473045022100e2199efeb3c99001c2af556a65d3d978682d9e686b0bc89b90acae728481365f022000edc2682ef7f77921bc36111e3146dde934147b7feee269d6caa5afc9b872f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001681202c8aa0000040300463044022019db671104c07520b255ae14e248eae019065847b556c66d3d09b6f98e5d9bf4022007bdb52de7714896ee22922f05eade8c8174f59d19f474a9e7ef6660a53c24f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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