www.mantovane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:14:38:0c:1c:83:a3:a6:06:e1:e7:b4:d1:26:0a:54:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mantovane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:14:38:0c:1c:83:a3:a6:06:e1:e7:b4:d1:26:0a:54:e3
Serial Number (int): 286544628521618006673421128034085442835683
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:a6:0c:bc:50:60:4f:a7:41:92:07:28:21:44:d8:6f:be:d3:a3:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:93:5b:0f:6b:d1:8a:44:67:10:5a:12:0d:c7:13:78:58:94:3b:91
Fingerprint (sha256): 68:2b:e4:79:95:24:f1:e6:65:d4:a6:00:39:35:4d:da:93:fe:c9:69:f3:0e:2f:66:52:0f:a1:ab:7b:70:c9:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mantovane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mantovane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mantovane.com

Other certificates including the domain name mantovane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mantovane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApVRGaKEKj0aYBxltD1jG
wC99abRRd+P1e30//CA4m+mRH2yXCZgp7SrP+LJYB/XShOxQ+nFdWuO+Zr7iMz2+
bqZaBC9h7Zf1YdCnXW31PvMZCHKF2yvlNjexiVCrJA+TaU7QE4KDuxujdZRPJkxG
Cz9K/ShGN2NvM5dKkhIeSpV/SJ43+jYGfM3nanZthN7guVx8xCIxIkRfH5rQse8l
csMY039j34iebF2gRMlbHWNScL2gLK3+1LukOrdu83aoCzStRkl790p0TAvKBggV
Inj7/N0gH/a7uhEZsrcRloH7ibpqSFUivYr77y38peIkbE75yw2CnIYhKMPB60M7
zVC21dTSotcrBH8afc61TEIixwxrhug8iXkBEeBCpIHRIjfmgM6WPomnX6Y8DM2L
8OyF8uKsVS69Fy2e+OaKRxHtqVr8quxNfBVFoeMcdkTzGdbcHxfGWz769PbMTxbZ
jf8bO5YDSdXOTyq8yKDXIKFnyDeTFn1fyYk35VkmcaOJFk7geARzDKBNEt3OYiWJ
8mGwUMN5irx8+MH2C1wCKfVtHFzffClvMCO5ZzrBEu4kOeg3ouhQz4GOmU3LUFjq
VaxbaJW4VuYlGQZEfUr8MXzsRGkr6iNk6hXDjdmXfv0cJjgcDQcAJMJQrQ/kLP7R
/pKHpn6OwBCSqvh0D4SD+wcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286544628521618006673421128034085442835683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 00:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 00:06:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mantovane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674484287405324057604339963405740161236578324384048625638004359490306522471191468464244931632384341322914368183444304709822061290542658328255727155952892996102684830133166911780695188584077170224343906445971543221548380652276744452353919251658041783193119543725307693465926083988851871805159879496547716755901118061859205353942623337989122755730079417747854622684095308078760529973938757517883033419523137154511447597368109560999043382384976988616524308729083682536579307158789459243304290010469716043538019405201766849500121679576608645577473337896306194006587712034933804132957638873892618181766392866707058842273406076247961976622948387199006623975259968488378960829767999282148018561984993554882643263648938732862522880639112383811070298894508706009969088384765786803998206251504464783735556743771768303232587551578496876882481606626788941259106573994998203406625310560056253651896497634216909527553386593208470964938093570840170895598735377099115925427038584705451607134633643567447668068054571782058174219760442338972398345844798769910962302092858075827384625219763094354809796635960234932064375034633607882229202885553693320165416874998752707281269600517284559108198527914212490753153050928370776740041288798710383252267596551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81a60cbc50604fa7419207282144d86fbed3a374
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mantovane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001706a6eb81f00000403004630440220464b26aa666cead53bba2fc5770d0d8f2e91c62d36e57dc43fceb5a3e87e46e5022029c3cb9b183301dc3c8eccbd5bb1abc768d8713afc9f6772eac2aee3dcce753a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706a6eb81600000403004730450220312ce04c676f06b1ec7fb1b820e1eb8a8ed05cc3dbb30e2a6238dfb30c995f15022100b72c49e07b6d4045aaebd5f7f79f9ed7c07d6ef326aaeaa5b334bfecc5f2e34b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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