bleggiosuperiore.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8e:df:6c:f8:80:d6:31:2d:af:2f:4d:59:03:e4:93:0e:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bleggiosuperiore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:df:6c:f8:80:d6:31:2d:af:2f:4d:59:03:e4:93:0e:99
Serial Number (int): 397066223481180082151981332266315865591449
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 12:31:e6:50:55:4a:e7:fb:97:9a:ab:d1:ef:0c:a1:49:53:5f:51:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:c1:2a:53:5d:f7:2f:f5:42:f5:80:07:de:37:27:bf:76:f6:f6:93
Fingerprint (sha256): 62:79:0f:81:27:66:5f:aa:37:79:a3:11:5d:cb:15:6d:35:8c:39:af:9e:d5:95:89:e8:70:f3:55:a6:f7:2c:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bleggiosuperiore.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bleggiosuperiore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bleggiosuperiore.com

Other certificates including the domain name bleggiosuperiore.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bleggiosuperiore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397066223481180082151981332266315865591449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 06:29:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 06:29:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bleggiosuperiore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921147907995477933323162650183672080577204998931716748236618632470212618326180868163845222117721882397159323164284314307382238784510005140783920903155028947027375434361730371335081176834830637144460513741794373873090137182160885435740697950934721277457832250789533146793248696059229685334106361716325623157056563152647279573131672901827222617988694175582716920579088502703512236747679120263470443135437197587918928533547783672874771288238385877007299105487142731510457620696696701693580581455287478442309883594487079085673671685087857496076624738105928289885420754458540834632335803451220387378792899451883669004103270429914339587372835307938985760329522601588780305308840464433071800580406568899227449398486271425030328702932524440831508165499195286558137319552275059564172124107799254121203710662857650098629920892106266488672759299119602684276459594022963208529669024625487178240213149115198453789910947140303629891136790894186523546427810738613060657689776437198686353556580898074626220713663912974426389909137332743432116489849540853178632717476753387263924169189195652628093696826458601709586797190683384907937787278330272928474172738982282670574257482549812819209565455615563609173576457356514846727192510368043504967613010901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1231e650554ae7fb979aabd1ef0ca149535f5186
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleggiosuperiore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1b79ebbd000004030046304402200cbbcaccaa6d10d79860ee68849d5b16cb489bb22cc514332746f61473d5a5ed022005bb1d057812b7a2d0fdfe710c4470dafc2048cdeca18b59b6bbc599ba3431430076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1b79ebb200000403004730450221008cd3a2cd2e0a1e823de1d717ff06577a9b4a929599058d74eff34815a2f249d8022066de8dc7f9a641a22fce679e6460dcf2d7c2d6d556279a950a92f70737e0f68b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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