santarcangelodiromagna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:1b:ad:99:1f:30:e4:98:62:60:4e:df:96:40:0e:49:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=santarcangelodiromagna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:1b:ad:99:1f:30:e4:98:62:60:4e:df:96:40:0e:49:de
Serial Number (int): 328749556974549148991188501418982394186206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:ca:ac:22:a6:cb:4f:95:7d:29:fc:be:a0:2e:37:24:1d:0b:aa:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:0c:39:bc:ae:63:3e:65:7d:06:7d:2f:c2:bc:02:9c:ce:49:26:16
Fingerprint (sha256): 6a:5d:9a:d2:c8:40:54:cb:9b:f3:c3:4f:a0:f0:40:ea:4b:3a:94:6c:31:a1:87:c8:96:b1:a2:ac:93:58:ef:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate santarcangelodiromagna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santarcangelodiromagna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santarcangelodiromagna.org

Other certificates including the domain name santarcangelodiromagna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for santarcangelodiromagna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgISA8YbrZkfMOSYYmBO35ZADkneMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQwODM3NDRaFw0y
MDA1MDQwODM3NDRaMCUxIzAhBgNVBAMTGnNhbnRhcmNhbmdlbG9kaXJvbWFnbmEu
b3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxf5dCWJq2iBl/Ree
cl5KOq/ib+SmXiXlxaI7Ekn9iZqWUvQ+h+6hPRCMcR8iRoIH96D5JlAiGNYfZeI4
j6hhkddG9DSa0VkyjaOjJTUYLGIw/M2fOlV4MZEflI9p6H+jGfWEDy3cH5E/jtNW
3bp0wx2X413s94O2bvfdZx4A62Q9WRT/mZv8+kRJhXMTlPDLLwQz0dy7F+0rJYad
R8FzAXrEd903qUTqy0TUuhr6RwoW0aY7UsgBpSQ6XGr4S2W6nrpB+VA5lMdpjdGC
8h1kLHumZZ6xXxgGjQw94WzSX/2FOgImFOR9B3j5uLdPjXFyRFeJFWyUnYBjYNh9
TVCu3Y1hUJ3jnpOPOyfHwxPEqj0UL1UQsQJJORLV6Dy2S2StMudCuoJiEhF4kS9j
mTdpyD++nkUhy0Oa8KfNuAP8QfblXLG6lSOySHMk2q3Cs+MUVW6i4/i2O3JZ4nzo
+e/AuzFzy7nazMVkY61kjji8Zlw5xO68sCIjka+oPXcGpkF03bED6UYslzWk/+Ws
KCKez1EcA1qD3BRYzES1lrOGakZ2pay0mj41xPSmwT2nk8rAQ7ZXTMbfolO+VO5c
fCP2DMI2jiP4bDjUraUNGTFPCkNmesX8FCLWPUxVURiW5QGuAy45Bxg6wE8L0Laj
nRk0IEhgoBH/IipMUZLqKaR9QnECAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUYsqsIqbLT5V9Kfy+oC43JB0LqlAwHwYDVR0jBBgwFoAUqEpqYwR9
3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw
Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw
Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcghpzYW50
YXJjYW5nZWxvZGlyb21hZ25hLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6
kZoMhKESEoQYdZaBcUVYAAABcA+QEVMAAAQDAEcwRQIhALauDsx9BtFRbDAx3thT
8E8RsR0iE49n4UP/ZrLvAeuMAiAq209xS7lYkAVMPBOG50pc207jFK0GjwElrm4W
AEYZEQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcA+QEX8A
AAQDAEcwRQIgIH8NjQdmdF/4gLFb64hd+OSShbSyWG3EOnIj4++tq08CIQC4VySS
sMRlPBecUDe4jwVm1McnwI43nClC9tGcJ+OxUTANBgkqhkiG9w0BAQsFAAOCAQEA
ZaIjmin43gBTz8NndhnRNSU6XgCOqHVnepTrsI0CaGoIK49wwh0uwnLN+OSEqYUq
e1SviHTH7IyxebT8S6o1BVdWDg+raTdXIVUS/SPSLogYOG++5Mv+C5FZl7Y2zQR5
1hNhKia82zN1m36XpQbMl0GNEOwxC1NirJOJfnnbSh2dJEdr7fSOxyfmWVOarBe0
dZdbMMLTyxesikJtSLq/LrDYUJUfA16jgriIpeWYYfZuX5dmBVfdZNAhuYp4wzi5
VmpVc/OKWULi+KJ4gRBsiW0HHXFJ/FE0TnUaGq0VP59DgW1pwYJbxSXiLK+a21le
Hk0dzbGKAeijJMY2R9Vu7Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328749556974549148991188501418982394186206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 08:37:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 08:37:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santarcangelodiromagna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807743444820509114427888993596380563890210518619408102921611095696164359192261183220992715105877678746791280033163703303818522946505049068174907361179685987257631894189194953521066997371318878544539049814704946678890810825836737802506686549322737634025512698341405620032005412598236435417269905434185945107100338875515418302219475021885775050013032913575065422119870278958972950821436829691054576141186166093303673812021070810935211490332485562815062621874258089991990956191386543758892156154456528674044908552853096058940462054152070494856113199485755120268956161072941589766072454126725838991178338204839123338548601180696639207416353144471685554456014775090364715571171284436882742122380658103204901642129211565432055652070557642592163246815668456741083774324897117215927260487672920848462413457204835743156804499788785527537454885325260821568780367733607413467559074680244214853201914301842678372794100540275006202777353011013123166601426311048991601345919529667378929970250591924493759865593516466026075376348019439833190124429187307020986811247508095243767831936280140688256985292636738362378341652568274258287868945529639445632250963623665207214211729984142781480901177666744021902071377418749638859777534919472568120754651761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62caac22a6cb4f957d29fcbea02e37241d0baa50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santarcangelodiromagna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700f9011530000040300473045022100b6ae0ecc7d06d1516c3031ded853f04f11b11d22138f67e143ff66b2ef01eb8c02202adb4f714bb95890054c3c1386e74a5cdb4ee314ad068f0125ae6e160046191100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700f90117f00000403004730450220207f0d8d0766745ff880b15beb885df8e49285b4b2586dc43a7223e3efadab4f022100b8572492b0c4653c179c5037b88f0566d4c727c08e379c2942f6d19c27e3b151
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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