sitoin5passi.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:07:1e:2c:13:87:8e:0c:55:a1:20:f4:16:13:b9:2f:65 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sitoin5passi.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:07:1e:2c:13:87:8e:0c:55:a1:20:f4:16:13:b9:2f:65
Serial Number (int): 287207778940121623469512120755217327796069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:b7:ba:bc:c1:ac:d4:6c:ed:70:ec:c1:20:7e:5a:72:4b:91:27:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:1e:79:77:59:00:f8:e7:8b:b7:df:f6:d0:f3:83:bb:40:de:ea:99
Fingerprint (sha256): 69:1c:c0:54:4d:a3:e0:c2:0f:7e:6d:3e:33:e6:e6:28:c7:79:6f:06:de:01:85:81:e1:46:61:08:0e:2f:42:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sitoin5passi.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitoin5passi.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitoin5passi.it
www.sitoin5passi.it

Other certificates including the domain name sitoin5passi.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for sitoin5passi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISA0wHHiwTh44MVaEg9BYTuS9lMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjgyMjIxNDNaFw0x
OTAyMjYyMjIxNDNaMBoxGDAWBgNVBAMTD3NpdG9pbjVwYXNzaS5pdDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMtBrWb0G8AFjchYgpepw4HqGjKpdh3k
xZO7kXwNSkmuentxpMRo3B4weYDA0cTLIt45sD3qT2qNT/0IOC4Z2051k4tr0mKr
tqdGaLhMp1EuoURDvezrgth/8LgCdr+0L3qb3nECjo3aHfmvh+x5XE3Wb1Do6alF
UDZG8l+OkI9ldt8oYOK3bb6TtpDIo5fUA9V5/g4Aw58hO2YHCh/0vpUxTG8Erb5Q
jFDUyGoBB/8xUtpAieM9n1cFhkZLD8PZ50WJWBRpljyCXY9k7n7+EYIOz2qrWQrs
QA3gQU9icYpnnl5ICvUkASptsG2GSp+PvuwXuxwZLksCPP8quY656/+ZdZ+Slz2F
K/qTV05CTiAi/AMKmiTk/nGnbVNESi+4irRWiI71ETs35btfKqc9s6xS6U3iEHn/
+FWN6yTcm5HZIDdUFG8C3Vf7oQ/kjfB607qO5Eb3XZ8buVa5Mzlnx2Wo/g6Qb+/9
m6yqXbeelk9FW3zv1SXkB/boE4n2vkLdsyzZ8aWbUDPj+he6FYmGpUNwQqqI3sUX
s/DipAPss0Czd+ccA7mOptJsL7+oQxiIPsOTPYHl061vPB9qLV+AR8YihTVAUK7H
4p42B9Y33OtAEn8fDb3GgLX+D+9xhAuwqVo0P/IOvLI5dEQZ3zyFhX9x0RVbmYNn
Y3Ox1zeZyqf3AgMBAAGjggJ4MIICdDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHa3
urzBrNRs7XDswSB+WnJLkSenMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPc2l0b2luNXBhc3NpLml0
ghN3d3cuc2l0b2luNXBhc3NpLml0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK/
/V5CIAjGNzV55hB7zFYAAAFnXKDV+AAABAMARjBEAiB0R4PUWQFEB2X1zEs67iai
auRIH/1SBLNH7imu5Rb+PQIgQc+0K/m0jfTjXSM4d+BsRpdTuFUqPSkklAxJprEi
tQAAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWdcoNXwAAAE
AwBHMEUCICmx6raXheXdT9jP3kKTm9jjvjNWRYPXgY+hBqZDsHNWAiEA+L7nZGEf
4OvNYSq6fcE0PFvfBJrgscO+LFngczm1wGQwDQYJKoZIhvcNAQELBQADggEBADgd
jYDP2Fwq41aYkaPnC1T7cZyjX3JlLb8dmD//Xo582M9o2jtCGSK7AJsFvPCrRGBY
cvPNmXGnHWzSeKPDASZiRMwjWfF2mmIvQtHwMeydYTi1d5xfzkkhGBD6KV6T42PJ
mKO1JGkUt0LPO/mHR6vzCoO+9ASmL45DrpgfRza9t5Tvqdh0Mry8fx41PZ1mL37o
4fkZ21WwJz90U6U8mCs1p6D/aP04JSmFRWJrMKAFpz63ZkTvDhX8+KtWEamZVcM1
uUhc6w11DPlG4YdJVip/rwmxM28B/87qfEm88kRkOIFoWUovo8w0LjoLQcddKjc8
NEF8c6YCdFHrZhiFTuA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy0GtZvQbwAWNyFiCl6nD
geoaMql2HeTFk7uRfA1KSa56e3GkxGjcHjB5gMDRxMsi3jmwPepPao1P/Qg4Lhnb
TnWTi2vSYqu2p0ZouEynUS6hREO97OuC2H/wuAJ2v7QvepvecQKOjdod+a+H7Hlc
TdZvUOjpqUVQNkbyX46Qj2V23yhg4rdtvpO2kMijl9QD1Xn+DgDDnyE7ZgcKH/S+
lTFMbwStvlCMUNTIagEH/zFS2kCJ4z2fVwWGRksPw9nnRYlYFGmWPIJdj2Tufv4R
gg7PaqtZCuxADeBBT2JximeeXkgK9SQBKm2wbYZKn4++7Be7HBkuSwI8/yq5jrnr
/5l1n5KXPYUr+pNXTkJOICL8AwqaJOT+cadtU0RKL7iKtFaIjvUROzflu18qpz2z
rFLpTeIQef/4VY3rJNybkdkgN1QUbwLdV/uhD+SN8HrTuo7kRvddnxu5VrkzOWfH
Zaj+DpBv7/2brKpdt56WT0VbfO/VJeQH9ugTifa+Qt2zLNnxpZtQM+P6F7oViYal
Q3BCqojexRez8OKkA+yzQLN35xwDuY6m0mwvv6hDGIg+w5M9geXTrW88H2otX4BH
xiKFNUBQrsfinjYH1jfc60ASfx8NvcaAtf4P73GEC7CpWjQ/8g68sjl0RBnfPIWF
f3HRFVuZg2djc7HXN5nKp/cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287207778940121623469512120755217327796069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 22:21:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 22:21:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitoin5passi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829214387293599969261033598645366737534381206577842050682500101074629033693890646227476579002533298432219978539972397835508594751949450589490869869155891818170080853296230139516790822193585149242994201496834612693812977113555871741340730999017418224054693046931339549757871799196265765962548506516652827627626458919702073435153904985376939097461339779307378173201121081127139463581957924479159176019855564284016204709166364076979519469237210888543589244106927428198771951789218105499799835692597728946468174927658293606558505365466472827705697490556688882799155799188310190617018368887488067297553413661505115498179420455927722453134599777821319389867381482859553072740069850074256107665043697943155253962299037508320102782516169417988611517548606462863576918784293934553845439757689476288079649468054629537582773126341558964669445854145516702092531479629546805294996017627924537984596712516077628057154381283154172504334229605724940306653500228685152358553264720176089790133021357124456822574305383553084157943962676102187549269315179956380148317578566362403707733793721259544511770704861290180647608489510375116039224721403110146726336123905712639200279610464883886243217199830113069960871641065942205232839385479327522040230619127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76b7babcc1acd46ced70ecc1207e5a724b9127a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoin5passi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitoin5passi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001675ca0d5f800000403004630440220744783d45901440765f5cc4b3aee26a26ae4481ffd5204b347ee29aee516fe3d022041cfb42bf9b48df4e35d233877e06c469753b8552a3d2924940c49a6b122b50000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675ca0d5f00000040300473045022029b1eab69785e5dd4fd8cfde42939bd8e3be33564583d7818fa106a643b07356022100f8bee764611fe0ebcd612aba7dc1343c5bdf049ae0b1c3be2c59e07339b5c064
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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