sangiovannivaldarno.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:41:1a:e1:57:1b:6a:d4:57:a7:d4:1d:f5:c9:b9:49:9d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sangiovannivaldarno.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:41:1a:e1:57:1b:6a:d4:57:a7:d4:1d:f5:c9:b9:49:9d
Serial Number (int): 264145656120536085289363337271811266660765
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:3a:a7:40:c8:db:18:03:6b:0b:03:aa:c5:61:18:53:b2:46:4a:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:58:19:c8:5a:c1:ef:21:84:0a:48:e0:c1:e8:27:46:83:9b:47:de
Fingerprint (sha256): 65:4d:cf:5d:51:12:3d:8d:22:b1:20:49:bd:06:f1:75:63:c6:17:d7:07:f5:4b:30:d5:b1:2a:15:88:97:9d:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sangiovannivaldarno.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangiovannivaldarno.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangiovannivaldarno.org

Other certificates including the domain name sangiovannivaldarno.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sangiovannivaldarno.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAslepS48h+tvd/f4tehfL
ZOGaPDOYj+pe7/gGZGCY9ZVnahlqzEHKaY/svkH+af46QxLxCNhHK6VxLZ9YpSBk
KUToXSOHVgWUJHG5t4lukWnbgSEolVy0nK7t+kAq/73oWKqg1EC6VTJ+XXO1uTov
K3UMsWfGXXOzwMarzgmrV3IvmPXANXpqRDsfavBdS6sDzyleg1NcSs193IgiRN8j
OlgCFBShgPUyFCqRgiNh27aFB4sRrGL/+wTF1Ep4UJXACSKFF8NpXZy++Y7rqbJO
l1qLB4S1q0vzGbcjezTwkDqdBu7gqnubZCsNM+Vru8DYGku1suOzTfPbihBjH0kO
TjN5qijJ7o+izY35R9mtGCKrrp9XMGTHqjswoHfV6wo2k+yLUsV3VM7S8yUOl9mP
8ij45dzDdYVDs6tdD2EAG2+CAEpP6bmfexL3OTF2yGPLIWeJzJA23NwPkOmdt+Ll
USB/6xOAi0uFb0z94JWA5MJwgMrjAsVt44iJVKzACZZ582UracM8679OLNWHLZO3
ZHPdMtHb56/dSHB5VsdeztdwfRFFRk8M2Ex0gm3gvbxMcg7Dcp+wfwjMIIOvJOKQ
OrScUS1QQi4TuYsJoXS1VEsVZHxxlCpZBucmERlcGLUgRz5AmVi/z0b2AvR6+yKD
BmbQtAsZpEJ73NQ2O/EmvGECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264145656120536085289363337271811266660765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 04:44:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 04:44:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangiovannivaldarno.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727573624342090914054301396834884978076240836206394716816697998649126022698997901996450136525437149714982024623718206909542380485535453221584077006540338277172948255068689614145991187882784574694938141177388833526360937025150841469746600158682683798931173317598340040384157396116566755701717228617467262709988698329693341408814819996375617442903576578338644181664239733732798155615405168279478089511411534905998475110706632208968369623430858687544835010354496536872863756381572682468376169498500170780690647108805641905612492838089635487615514912787131872136996158685337509716465593080909824374603747141092191773670829493710604412052090351664541563438265439293334765169270485192880993222145409074078674216845537953521344935933105218989548507691507148946372156574341928797017550518438968849181500240351647115963740918621013645180992959795349961951071590533812016268903923251166906916860579286081995955892368494022793963746993906561044326618430497891760986625479742883549356181944238793250973913556820957688772955166827250634131177110196119806932264825380209529288867106463012533134279448656911114759555886675825246772585045991690775914253076635342586587029930741109303214041367592909642085180248202351765745065454634685339316972338273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							313aa740c8db18036b0b03aac5611853b2464a3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangiovannivaldarno.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7b8c6be30000040300463044022021383d522510260b8c9eba6afc52fb451c07d126d5e56bb472d2073a7198daeb02200b5d7a838ba1160a5edbed1dbdc79d419a86379db7f8f6d62806f51743f4988c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7b8c6bd100000403004730450220150b4868b037a433a25df071c295428720ca3afcc2615b0754d3b27a1a9bf2c6022100d1e7b9d25a63982baf35dd61752711fe1bb76a4f4cbffe6577b7792070ea27d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b66b8eb9110d9e78bb3af17b5ffae00d0fc7db19c77551959a439c2a9d7f4c64f2a1de11153c3cf0bb6124757b69b8179315d1448152f310796686b5a400ebe84f0bbf16042ce46628d8812ed4fa8c672df745a0ce3af8fde83a8b835c61a7c9d96fe462f2cd608229241e9d89a1fe6a865c472390d6ec23f34df4541dda24a1ec99f0554e9fc4101a77078e6920f8b0cc00cd3926904a4e8029682258c026622f9d209f0ec5619aa1049a2aeaf08c5056b7fc24b8e077619e3cf78d13c4213ea35472ca9b9678f5342b8eb72a1eaee5717f98f517d2fd7d9c3aa5385939c8ac2434970f8b40285d3f5c6ce2af3a34ce9118590236af7bf9da04fbac2c77db8