www.sanmichelesalentino.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:06:2d:47:0b:04:0b:88:06:cc:e5:6b:29:e3:bb:b8:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sanmichelesalentino.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:06:2d:47:0b:04:0b:88:06:cc:e5:6b:29:e3:bb:b8:bc
Serial Number (int): 323957023770990604307129428404214548904124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:32:45:80:18:9b:1e:89:01:7e:bb:31:7b:04:28:f9:62:48:d3:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:e8:20:03:03:26:9c:21:35:22:dd:75:97:31:e7:3e:59:66:86:c6
Fingerprint (sha256): 64:97:a2:16:b1:d8:fb:2e:d2:68:51:ed:13:bb:1c:ff:df:27:8f:e8:00:a6:a5:c6:3c:fa:12:43:9c:d4:d1:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sanmichelesalentino.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sanmichelesalentino.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sanmichelesalentino.com

Other certificates including the domain name sanmichelesalentino.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sanmichelesalentino.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323957023770990604307129428404214548904124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 07:23:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 07:23:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanmichelesalentino.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717629039089546465101337562199890779873601076463413646821545514605454599029694967940241311772836957862021114249788812443033532030713738817990231393539021323141694635746749564939398663698099024387664695888537710736209650926305213281685237142310736464906663971928786679948137534163155779710936697985779707102970733967888733575480678740916810073367443227916821861292078902772780628262787532027112379277296028075241354662001311812673726687447757048286430277290927772226883427491038524971944817933586207202653529688491330946631861207613412692619294820368782955820174292239823197989623999687891962777755951460482033672001645941458281439735877024941879554544658503299104532926006004376405009703074192296746546612685798585728254139646792526588248315695079676012236217364234403597540862500159983873164498515180341519715084423594696172127068975813554993204813870346282318279601264602182304299992281371166755198820481217314476765454533642464919651273860622402013866296758569025016390969297299657972792793797293907076388784076160183425076353148169895594417446162032363465823083513384342082531261676552197086257481583127809098905763414032090127963420527743838654899245537947150852375449156025983599499922219075283151763024200335820140500369153251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6324580189b1e89017ebb317b0428f96248d3bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanmichelesalentino.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c32870aba000004030046304402205d3ef2fa1596a6c24729c95023b829565fded8f9edb1a061e6b19f1bd0203d5e0220188cbde539b944cb86dba4914c5686bd55463f8e5fc8c235df19a659314d272600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c328708eb000004030047304502205ab6498caa6eb74915189e8a2a1d71b4381e257d823c40521506d523f0f96336022100cb6b51eb53f412989af43adf0ae75410e808ffb2d6b55894dd185c58061d5019
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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