www.pastalunga.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:84:66:30:d9:c0:b7:41:67:3f:00:35:e1:26:d2:57:4b:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pastalunga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:66:30:d9:c0:b7:41:67:3f:00:35:e1:26:d2:57:4b:3f
Serial Number (int): 393502251062975540874116127666031186889535
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:cf:15:d4:fd:d4:cf:f1:bf:26:dc:a7:a7:86:cf:d2:fa:53:97:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:98:5d:cf:17:a8:61:82:04:0d:08:b6:8c:e3:c0:1e:d9:b2:9b:0c
Fingerprint (sha256): 5d:cf:3b:88:ed:f0:9d:36:28:12:89:1b:ba:39:c4:38:c5:91:8c:9c:03:8f:69:ff:1b:8e:b9:9a:77:e7:59:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pastalunga.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pastalunga.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pastalunga.com

Other certificates including the domain name pastalunga.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pastalunga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBIRmMNnAt0FnPwA14SbSV0s/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjYxOTA2NDFaFw0y
MDA1MjYxOTA2NDFaMB0xGzAZBgNVBAMTEnd3dy5wYXN0YWx1bmdhLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPFHJW7+iOLISNAzBqxFvd4g/wqN
TAN2d9eT1EOkFHAuSJIm2fl0J91KdORYerw9phIkNoWIlSkpcV3s3cZ+kMdc5Fn+
WINFw+iuMViMznz6ZEVY9F9rIVy56kH+iyyNwNJqDNjaubzak3pwLzTwVZlA62Rb
N30+IFG1wPHxOJEhxX0+qeSkcZ5lve5qi8nVHo+DpXnVm4ODHtvunWhiD8vklyB6
8oDMvolVvbrmKZB6FrAQifqLnF+kGVVHHH0DPaufJOyXDbTgXQiz9Y8w7MjWS8zG
ulEJAGqG79WS5wvv0f/Rr8Z9vEeLkzPaldVpZ/ctgUtcOi0Nuz+CyoDfKBW8HrHX
5iWIDqGJRPvBFFmJOgRwi6FUpUJcPQ5r7YxqmMVcmWtgvzr0Pl6p2Cbqkw45TRAW
TzOaj5qdbSaMdhm0hhOPD1KFFFMj5Hu/jl/RADcTWVy/K23zX1SUd89EVYFCeBh/
ivstU72OQ8c7ktQAx8kGo4C7JmQU3+tyIUXy81yLWXmv+cUD+0lbb/JR1ACMXcXP
7hpsQ6v4G1DziEOVpJJvEBPFxHrgbnUU9wULx+pR+JPr7c68zvl6RiPX7tYfuEKX
Uw++J2KjHhDntx3ycR4gOregahHTNaOB+XymWydiM/sQThKWqflBMrZSWT/xbQPF
f8SqaTVkZ40ks2xxAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FJHPFdT91M/xvybcp6eGz9L6U5ccMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnBhc3RhbHVu
Z2EuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA
AAFwgxvJ+AAABAMARzBFAiA83z/OaIpLYn86u48exg6frvYt8ZlGTi9dL8IinKw2
kwIhAOpJxjibJm6b9l4DgJHrdAYpH3S9e25WQDwQMI4bPvWDAHUAB7dcG+V9aP/x
sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwgxvKFwAABAMARjBEAiAGYyhHtC4A
8H/++5bcRfOrZsqErkGtMud2cQaI1ISkdgIgXQijhNj8SB4UEtVSi8r8vF9/+ZgV
HgbPxi+cUrvtiAkwDQYJKoZIhvcNAQELBQADggEBAA3lwEnP1CfLD6TW0QzUihV+
1qquxgnXTE8w4q5XkqpLT+YV1zCef4LU8L7mNT1h1dol3U7lRFJ9Q2zjXFi0CZSB
bOg3+ASNzGiCWL99uaSnXBtvJZpfIZRk7O+1fPeYFkdXSWcE7O0xZYN8pvxo54Vw
qcVElRTRIuWxYURYkThJucCihiW2NTDwdIbA+gqHFGzvwJdlbWw38qatAOLbsV4+
2rlbggXrrR7V+sRrv587jSRJNADqHg9W73DP7yZf96U3HMagzPhXJk9QQyzmQDYP
rhZBCeyV43FBxJLFi+3sjnkJKK3k68JgTZPS8oiby0GaW9zs7rB+60qaP0gb/m0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393502251062975540874116127666031186889535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 19:06:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 19:06:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pastalunga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 984328014433191876830698608159124257646093863981977190674685627513156396273688560692654675917025853357217014453502477373406145471755961850136568661048487771280131263415063306530084856564720130741818987364470253955865166687941151344467467265122033478860925397203045373975533017217709079696320758514397214054137746453357682864254967055518066398231288573610730697861764981823398515125079174167913552501573686963358375405301339661397128858253766906962433682387941276750122566776725190802184849153953003461612420498147287923349354241489458761693290060855347185509056877244366408818811913880970622190335769285581647021053099651369071501553804052087766127223357485648989946769383048577270776871000051791282044919506678740745733592856532046916556699098189667337891491101466651416914968673214402607032618650618501328992577075291041039945430880449981621310216162217932140148071248629182491455000122069186449176692125644848641025001192176794122071190817432750754478041584325362670084890898090293454908002975953052364262814090537196635596723730948143752063547789527127919183338304761322237761683354842655202860952430738309148704955931043067278949076744259348815297013565203625883735586735115140232608651457895694895094139146585426028068091423857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91cf15d4fdd4cff1bf26dca7a786cfd2fa53971c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pastalunga.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170831bc9f8000004030047304502203cdf3fce688a4b627f3abb8f1ec60e9faef62df199464e2f5d2fc2229cac3693022100ea49c6389b266e9bf65e038091eb7406291f74bd7b6e56403c10308e1b3ef58300750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170831bca170000040300463044022006632847b42e00f07ffefb96dc45f3ab66ca84ae41ad32e776710688d484a47602205d08a384d8fc481e1412d5528bcafcbc5f7ff998151e06cfc62f9c52bbed8809
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000de5c049cfd427cb0fa4d6d10cd48a157ed6aaaec609d74c4f30e2ae5792aa4b4fe615d7309e7f82d4f0bee6353d61d5da25dd4ee544527d436ce35c58b40994816ce837f8048dcc688258bf7db9a4a75c1b6f259a5f219464ecefb57cf798164757496704eced3165837ca6fc68e78570a9c5449514d122e5b1614458913849b9c0a28625b63530f07486c0fa0a87146cefc097656d6c37f2a6ad00e2dbb15e3edab95b8205ebad1ed5fac46bbf9f3b8d24493400ea1e0f56ef70cfef265ff7a5371cc6a0ccf857264f50432ce640360fae164109ec95e37141c492c58bedec8e790928ade4ebc2604d93d2f2889bcb419a5bdceceeb07eeb4a9a3f481bfe6d