sangioriodisusa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:99:a3:18:08:2b:14:0a:72:40:75:00:97:54:91:b9:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sangioriodisusa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:99:a3:18:08:2b:14:0a:72:40:75:00:97:54:91:b9:3d
Serial Number (int): 348313080075288069299514109632184480545085
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:e1:8c:8e:d3:e9:2b:b4:93:a7:40:12:66:8a:be:a8:ef:db:bb:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:69:ca:3e:41:70:3e:25:ce:83:d2:00:8b:88:55:49:55:7a:22:93
Fingerprint (sha256): 66:9e:2e:5a:4b:40:e0:1a:81:c7:4a:fe:2e:77:75:09:7f:76:9c:00:c2:b7:5a:b7:22:d8:01:39:af:a4:1c:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sangioriodisusa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangioriodisusa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangioriodisusa.com

Other certificates including the domain name sangioriodisusa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sangioriodisusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348313080075288069299514109632184480545085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 10:29:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 10:29:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangioriodisusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741576264516532990410505410394391921641806806729671387759252684068717954588624261468905108313640538168277062776675919819752030224113818594827240141161419482545679698911859364362747092457728698848546224453643936197667211457329636661221214146421124465471373111504832077145365643977790254866955798320475784256233310316663422401714393927764528398815412543258747774528413467718372386431462186729387629847855775904542104552796256250761549414385165961122384339791429318506333270158029715825202730115301212469929683467319447313263601728891526910336826188969581629972236838789393126638931811523430055647709830000048721406111705013877398106024262174859804771196077028102033496975151700069284308321030757241444010741502330153581791086694438637643550148526487739441420692389609335713240323062900426512829213248129480262583526349549061035007355542852309147693085122776034888652542375499330631410139306376149363777282953323933078681521965912804587731571848809476562373223507459980982486623942026689965410699931185237303841165355932414107188089086687656291436718080033479102759416836856069104384703245283061080510351149438750283527756623745765913702033078047936015982417884490988421546712828048578869228658121631835096697984920130318883206548014921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22e18c8ed3e92bb493a74012668abea8efdbbb51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangioriodisusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af90d9a6b0000040300483046022100d077c170b7db69613959beb398591a59a5a054578cb5b2eec48b8e4df32ef745022100cd4239d75cbc915fb36c73e5d0381bb6339db9be07432484bdc9567cdfbc421b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af90d98980000040300483046022100d112474ce580870ce4fdb0287c526c9f6008eba95473983a3f94b90755059085022100b0704dac8fca4474a3762958abeb66d31af2fa243c474d4401c8a33ec8e766c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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