sportelloamico.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:98:96:62:f7:79:0d:70:fa:a6:a7:60:25:24:88:8f:ab:97 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sportelloamico.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:98:96:62:f7:79:0d:70:fa:a6:a7:60:25:24:88:8f:ab:97Serial Number (int): 313259675631069199835021700687347972025239
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 09:b1:31:9f:43:a5:74:08:9b:f9:6e:b3:1d:a3:53:ea:85:d6:46:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3f:5e:a2:41:c4:9a:e0:7f:85:b4:f6:3f:78:42:26:fc:2e:0c:20:4e
Fingerprint (sha256): 5d:c4:81:d5:33:d3:03:a4:57:88:2d:42:40:e2:c7:46:ab:6c:c2:6d:41:59:3c:45:85:48:d7:71:34:1e:0e:fc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sportelloamico.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sportelloamico.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sportelloamico.com
Other certificates including the domain name sportelloamico.com
(limited to 100 certificates)
acqualagna.org
www.sportelloamico.com
www.sportelloamico.com
stemcellparkinsons.org
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
sportelloamico.com
sportelloamico.com
sportelloamico.com
chemare.com
sportelloamico.com
www.kadams.com
sportelloamico.com
sportelloamico.com
poltronemassaggi.com
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
www.sportelloamico.com
stemcellparkinsons.org
www.sportelloamico.com
sportelloamico.com
www.sportelloamico.com
sportelloamico.com
sportelloamico.com
sportelloamico.com
chemare.com
sportelloamico.com
www.kadams.com
sportelloamico.com
sportelloamico.com
poltronemassaggi.com
www.sportelloamico.com
sportelloamico.com
Certificate
The complete raw certificate details for sportelloamico.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA5iWYvd5DXD6pqdgJSSIj6uXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcwMTUzMjFaFw0x OTEwMjUwMTUzMjFaMB0xGzAZBgNVBAMTEnNwb3J0ZWxsb2FtaWNvLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMF0YoEmi01+K87WmO8GUfKylD9N CI6vfwR1n4HJqRBAtyzEk9HEY5UZAEMloz9jZlPW43Qlazvp1pdDrQha53P6z/LW z7UMcRvRqpjvLUPvdzKEV6rQVzrdMS7P2bB16qLAZRTmhMb0NMuLVPRKWjPIjLf8 vCM7ZrvAV1NH67XeUyf66M2rkygaftQhui3F7Td6dCsfxK7Dub5gzkRiN4iSHkce ergP0tjh3DOLf1h63PYjy7FFPtHwwlKHnfZ9nRTJdkJGHDGi9/q/D50tci4qMUw/ Z8xY/blBsr47AXoafa6ftAjGmlaCplXRqUzCqjRyL5lwx9vGaLj1c48B96waTgmX RgOqESlQiaP6FcJpoLUher3uK5RvtHnu2kzFxPXkdj+3d9VK+QEI0zCAQ7SA2ftG mMGXRCPhsAjuMfzUK7MyXerPTe7kqMJvF9/GLta2jcPoDMMsdWI0zbeNde1yZtBn z/CCIBptnOIn6n9YvWRCaqjfKVsy5qETcKZCOg7URAAqjqn7UiLABfh3DSPiGw2C SCrs1IwMzAlCwwWt8IWIBT86v2aOi1aUFrvAGWfvhRI105Q2+qa9NV9wFt3VCIVo BQy/ouNKAp1jwrslKBY4TUnBj69Vw7iQ/CKNaaJcRQRWKcZvGpsXb9JMXfI5CHgx Od77cA3Tg+bMt1NHAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FAmxMZ9DpXQIm/lusx2jU+qF1kZjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISc3BvcnRlbGxvYW1p Y28uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFsMVjZOwAABAMARzBFAiEA2FkfvBV5xVIyFHOmkEoCwzn7vaP/tBJzJtjjlAPf YxMCIHdWSQssbV4HTtg5wEPh7UJMesAShgcCAsIXFuDzRfiCAHYAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFsMVjZLwAABAMARzBFAiAOCgW6lgJX uQtseR7BGN6tGGeQcTI3G/JxjX98KV86VQIhALMpyr03HrXI/TgInkBY7mvMr/du zrx4zlx6IYZ53EB6MA0GCSqGSIb3DQEBCwUAA4IBAQCR+fi4wvxcdKz1uMZOrToH gr68k32R/gHeUPoWxcxZPQNpx6JUWPpnNTmXIsNdCV5M2wOsnF4r5Aqxqhc2NA2O vbuxL+0h2spwYDGs8RJwk6o62zRPX+ChRHwGsGsB67dpFpC9VmHBwg8UDMV1Pbwv a3d9FpjxquyO7MopHckloco1mIKJ4Xh4pf8mrjDOcVAZFUYrVryUr9zTIo0z/a7l YQ0QjeDYZ8Eat9g+pBtYNhqbSrNjyd8i26C7e3I87svbQc6Xc5/yWzvgvA1NLBqW U09c3U9jv1sstlpmWl8l09Yu9K7w/6xHWnQw3wnQ6cCgQcGfdho+nfH7CZ9F7mch -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwXRigSaLTX4rztaY7wZR 8rKUP00Ijq9/BHWfgcmpEEC3LMST0cRjlRkAQyWjP2NmU9bjdCVrO+nWl0OtCFrn c/rP8tbPtQxxG9GqmO8tQ+93MoRXqtBXOt0xLs/ZsHXqosBlFOaExvQ0y4tU9Epa M8iMt/y8Iztmu8BXU0frtd5TJ/rozauTKBp+1CG6LcXtN3p0Kx/ErsO5vmDORGI3 iJIeRx56uA/S2OHcM4t/WHrc9iPLsUU+0fDCUoed9n2dFMl2QkYcMaL3+r8PnS1y LioxTD9nzFj9uUGyvjsBehp9rp+0CMaaVoKmVdGpTMKqNHIvmXDH28ZouPVzjwH3 rBpOCZdGA6oRKVCJo/oVwmmgtSF6ve4rlG+0ee7aTMXE9eR2P7d31Ur5AQjTMIBD tIDZ+0aYwZdEI+GwCO4x/NQrszJd6s9N7uSowm8X38Yu1raNw+gMwyx1YjTNt411 7XJm0GfP8IIgGm2c4ifqf1i9ZEJqqN8pWzLmoRNwpkI6DtREACqOqftSIsAF+HcN I+IbDYJIKuzUjAzMCULDBa3whYgFPzq/Zo6LVpQWu8AZZ++FEjXTlDb6pr01X3AW 3dUIhWgFDL+i40oCnWPCuyUoFjhNScGPr1XDuJD8Io1polxFBFYpxm8amxdv0kxd 8jkIeDE53vtwDdOD5sy3U0cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313259675631069199835021700687347972025239 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 01:53:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 01:53:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportelloamico.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789226025793169621040020431473611850048442271090775276445960523885466626619247827045001887188845457031240907393192818965282118224424195593643028799432983854789912789073654219767320260984662455741701973228026434962079116323636139718428019909388760621806192678388508530201012655430895948314702705925511912756189786530007298535226631223423163131373152032179581782988946995633852274597518207166327121311199763165976669322014050773297888548189308482132729806102002936858949875034510059427310400323466572997304437119363440508934723574994301147118278104537507557451487087634744079580706756040527737224894368899266497888482822041193619948584203058963587012995132213685027941334065393959818166810089083505068084890769280316266116478526432592283628854992293709972649281982845477459018506055245324942771599544716268581438832214766284973540424279712752657609345519274235031881345614817239156178495714468135581545688176929886690134967139154981897015306531968052696745548691076174884067048196918981702527236878539880654179171265602313705405217616489367918736256407731016527203716321817172302129246298626582889606334940651577320060759827579387534635329603920548884662699915727053310532181129213291661223301825402175896284249286094694617397054624583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 09b1319f43a574089bf96eb31da353ea85d64663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportelloamico.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3158d93b0000040300473045022100d8591fbc1579c552321473a6904a02c339fbbda3ffb4127326d8e39403df631302207756490b2c6d5e074ed839c043e1ed424c7ac01286070202c21716e0f345f88200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3158d92f000004030047304502200e0a05ba960257b90b6c791ec118dead1867907132371bf2718d7f7c295f3a55022100b329cabd371eb5c8fd38089e4058ee6bccaff76ecebc78ce5c7a218679dc407a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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