www.ostetriche.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:2d:6e:bf:b9:2a:68:de:96:b5:fa:ff:7b:99:e1:7c:2d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ostetriche.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:2d:6e:bf:b9:2a:68:de:96:b5:fa:ff:7b:99:e1:7c:2dSerial Number (int): 289300402183873023501639399714652086697005
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7e:29:d0:02:6e:24:fb:6f:75:00:61:05:39:93:66:d2:bd:d0:2a:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 99:40:38:65:91:d2:49:53:b2:28:c6:de:aa:46:2b:0a:a9:5e:7b:e3
Fingerprint (sha256): 68:b7:20:d8:b9:40:e6:09:0d:02:39:a7:d0:8d:bc:2a:6b:65:b9:a5:d9:94:f2:6c:c9:38:9e:dd:ba:de:f0:0d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ostetriche.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ostetriche.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ostetriche.com
Other certificates including the domain name ostetriche.com
(limited to 100 certificates)
ostetriche.com
agratebrianza.org
www.ostetriche.com
ostetriche.com
ostetriche.com
ostetriche.com
www.ostetriche.com
bernareggio.org
www.ostetriche.com
www.ostetriche.com
ostetriche.com
www.livenudewebcam.com
lignana.com
ostetriche.com
rilegatrice.com
www.ostetriche.com
ostetriche.com
ostetriche.com
www.castelgiuliano.com
ostetriche.com
agratebrianza.org
www.ostetriche.com
ostetriche.com
ostetriche.com
ostetriche.com
www.ostetriche.com
bernareggio.org
www.ostetriche.com
www.ostetriche.com
ostetriche.com
www.livenudewebcam.com
lignana.com
ostetriche.com
rilegatrice.com
www.ostetriche.com
ostetriche.com
ostetriche.com
www.castelgiuliano.com
ostetriche.com
Certificate
The complete raw certificate details for www.ostetriche.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA1Itbr+5KmjelrX6/3uZ4XwtMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQwODM5NDVaFw0y MDA1MDQwODM5NDVaMB0xGzAZBgNVBAMTEnd3dy5vc3RldHJpY2hlLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANG5IB4R/lhbmnjNsYyd8rRYc2yd 9irsCSqefkgrYJvyj4/vUFh9BkHflEQqU2eXgd5Zh+SlFo6HC/GgwmVRf5+5LHyt IyFgAY0pXiABzK2gpeY+o7NiWuoJ9cxXqosyeMS90eQ2n0xqIKNQvgWLTybLRQ3H irxK6PdRF7sWItTI4bQKeHVu/gNXifCMXZWwcDT3hn8b1tjF5CTv89zwn3wcdUnC 37Lp6YTzrpbYNGxj8F/7O8BvyfXl78XvsRArTGNJCRgzkC6Gk/u7FT68NasV8elA PXtmXK0tj6JUtXkRq8wYyA6wc4hXLg/N28OMCfrsPfuCXCYP65suB+Zv+IdjTXes 5xaEW69UlFKjdab1QWlwfjhJ21oIrtGSO4fBaJJAgzf1uTzWbyK2eUmotxm1zX9C kRHJEnYORkOnL7zyrjwmYboBsdQG46ytBhFzJ4DFEmEGEcdJrmLaKfMX4ydvS2Ax CAZyPn2PPwl4mhzekxF7FmEYD5A/gkd/LjPYmxkV7zZZTZ730ADQUch3LYE2zAwj Xw5tEj3Z9sL2vF74uXcq7bu6QRGo37/JFUFc7psJvDJJROiRaDRzo7shNL7KtybQ EJnnOvc3EOqqHmzGZnxUU3oNclz/XHPt37cgipULRueFx9TQpaJypS2/NJpqaThC 1k0Bxq3xT8BK2n7lAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FH4p0AJuJPtvdQBhBTmTZtK90CobMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3Lm9zdGV0cmlj aGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwA AAFwD5HnXwAABAMARzBFAiAK5XXi0PxtPmDBxF/JsEMIdlzczT8/AE6Se3fvQWWE dQIhAPUSXHX3uhfFkmRovlKtvNvG1Hi/pZgep506bAIaNCXCAHYAb1N2rDHwMRnY mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwD5HoTwAABAMARzBFAiEApSmuPnjC dAg6rEaO0CAF0D+kSL3QSGWwS4I0vL9x4YYCIBYvojdjQHENQKCzOnJR3HJGJlvK BrhO7xnOR4meiJWIMA0GCSqGSIb3DQEBCwUAA4IBAQCBcsn2pBfgCpfKCvgIAs8J Z/P84INsbua65UMXsRpb4Y+brwXyrWLlzI68lMlPBOos90SNyw3yezKDuH+ODUAt 22IDVLuv822OHhLOTXZfpMqfLTlKk0D9l2A7JMKfHxQDMVx+qBPjg89WDMcW0BeJ Yh64rqfYF1DmQu2deju8JHC9HA+sIt7vqO4Daey+9ok/JOH+ZIx3syGBJp6LtvMw WnsN85Me8miwB6AgbD3z1D/WWRXgCjYGerODm5u8j/sPFgvKTlojmOUZNkyq0uhD NFqGdmWnPfazGpfMenQVulAMmCagOHo79nvSrYx3QmfU/twquYaR+0B072nQS3YM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0bkgHhH+WFuaeM2xjJ3y tFhzbJ32KuwJKp5+SCtgm/KPj+9QWH0GQd+URCpTZ5eB3lmH5KUWjocL8aDCZVF/ n7ksfK0jIWABjSleIAHMraCl5j6js2Ja6gn1zFeqizJ4xL3R5DafTGogo1C+BYtP JstFDceKvEro91EXuxYi1MjhtAp4dW7+A1eJ8IxdlbBwNPeGfxvW2MXkJO/z3PCf fBx1ScLfsunphPOultg0bGPwX/s7wG/J9eXvxe+xECtMY0kJGDOQLoaT+7sVPrw1 qxXx6UA9e2ZcrS2PolS1eRGrzBjIDrBziFcuD83bw4wJ+uw9+4JcJg/rmy4H5m/4 h2NNd6znFoRbr1SUUqN1pvVBaXB+OEnbWgiu0ZI7h8FokkCDN/W5PNZvIrZ5Sai3 GbXNf0KREckSdg5GQ6cvvPKuPCZhugGx1AbjrK0GEXMngMUSYQYRx0muYtop8xfj J29LYDEIBnI+fY8/CXiaHN6TEXsWYRgPkD+CR38uM9ibGRXvNllNnvfQANBRyHct gTbMDCNfDm0SPdn2wva8Xvi5dyrtu7pBEajfv8kVQVzumwm8MklE6JFoNHOjuyE0 vsq3JtAQmec69zcQ6qoebMZmfFRTeg1yXP9cc+3ftyCKlQtG54XH1NClonKlLb80 mmppOELWTQHGrfFPwErafuUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289300402183873023501639399714652086697005 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 08:39:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 08:39:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ostetriche.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855595789825505311625590145898748651742867402976278043781188192872652767304079178294038383626025837657851126760450842523788344015865205091843593722216271664210529100746328910703310424740582332544384174675581453127818899911808618884699431198311382380329513212360131527256980991184122972539305778219110961755745162572613982262298966981860791743255812914019597609873883211032034927310481623671566912567482989152540607004994432564342658757200732209673887276226744664762411154099846192481395860641749300904019198554498529244805990186189865614024862101411283942623956934032960100750344341356068474852717048402121342432230793540613797631756120590108129627025198945815562232932440265367802044524123219264502146729206606551706472508265881048711268131524244849824694015103705182782818902682182569552246443373506937215533793773858121615020275742800736345544503689799064861911365691248732070592606674185810040249873733352251998081733749956219969849175475500572704064266674414740984483903827189553005103640208258311238056443143361978383455754962166053067954533473257953306934574622942069895055447651513303596691773119130670113401514372919732305785965283359037882116464835029497051319417173903656491975105245348652015495893954576503599445676031717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7e29d0026e24fb6f75006105399366d2bdd02a1b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostetriche.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700f91e75f000004030047304502200ae575e2d0fc6d3e60c1c45fc9b04308765cdccd3f3f004e927b77ef41658475022100f5125c75f7ba17c5926468be52adbcdbc6d478bfa5981ea79d3a6c021a3425c20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700f91e84f0000040300473045022100a529ae3e78c274083aac468ed02005d03fa448bdd04865b04b8234bcbf71e1860220162fa2376340710d40a0b33a7251dc7246265bca06b84eef19ce47899e889588 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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