www.ostetriche.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2c:ea:ba:97:66:c0:25:f9:82:ee:a7:64:f7:bf:b1:8e:da was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ostetriche.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2c:ea:ba:97:66:c0:25:f9:82:ee:a7:64:f7:bf:b1:8e:daSerial Number (int): 363733576060576226529365226495443607850714
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 82:8b:73:85:4e:77:af:4a:3d:9c:9f:35:03:12:49:00:f5:67:46:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 27:df:d0:2f:c2:9c:50:4b:e2:ac:7e:a3:26:ca:65:b7:92:fe:a8:60
Fingerprint (sha256): 6b:15:b3:f9:b1:e1:56:e3:e6:33:32:6f:33:f6:9b:13:ed:64:38:59:02:83:87:17:43:74:e7:c9:29:02:d5:72
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ostetriche.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ostetriche.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ostetriche.com
Other certificates including the domain name ostetriche.com
(limited to 100 certificates)
ostetriche.com
agratebrianza.org
www.ostetriche.com
ostetriche.com
ostetriche.com
ostetriche.com
www.ostetriche.com
bernareggio.org
www.ostetriche.com
www.ostetriche.com
ostetriche.com
www.livenudewebcam.com
lignana.com
ostetriche.com
rilegatrice.com
www.ostetriche.com
ostetriche.com
ostetriche.com
www.castelgiuliano.com
ostetriche.com
agratebrianza.org
www.ostetriche.com
ostetriche.com
ostetriche.com
ostetriche.com
www.ostetriche.com
bernareggio.org
www.ostetriche.com
www.ostetriche.com
ostetriche.com
www.livenudewebcam.com
lignana.com
ostetriche.com
rilegatrice.com
www.ostetriche.com
ostetriche.com
ostetriche.com
www.castelgiuliano.com
ostetriche.com
Certificate
The complete raw certificate details for www.ostetriche.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISBCzqupdmwCX5gu6nZPe/sY7aMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQwMjU4MjBaFw0y MDAzMDMwMjU4MjBaMB0xGzAZBgNVBAMTEnd3dy5vc3RldHJpY2hlLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK/pm7AgSiB4Np5hkQI7PvHkTwzO XvDFO+cejkoZkiWjJRegbQYiNA9ib/98zSr1icBqGlipn0vVSwjGt+pMt0N3IPZP wfkrZT82OFZalioYtTQR6Eg2kZD9hjKTqMjqjmZqrtsi8ecFW0M5WRBKWK6vPRZB 7zotj9UCMcuve/3rvn/C6W+JbgTCgaKlWxPiIXLm1WvJOasyME6fq2oVA8pzukmN j6M0MFOsvfmiiYhppjvD9HB38Ie4aZq6GKV9HSK2fdlveNYzKLg496TpuV4AZE6u HBLCtwA3nGeo7QdD9COBPaM72wP29ALlRYMs50bJCjrSz/W5yLjMWqThJaCFMIMm cLY8CNlvSwPAxVTbWaS/hbbeg3zNxMpmcTcjFr9Ghu2ZM0JngXELbm5g3mPLRymP u4+Rn9UMxOFpHAspgshYt+xIKcapFYLNJH7UUHRpe/iAT4YVKG2gGxie1wc0Y93n F43KL9Smh2oMfgu3FygrpFD8xaMyiUCKTZVS52yxEWNdIdlmdLg2L+1o0EGoj12Z lSe+P8JsGeKrb9oz+oR9hfhvQilNzEOpMjZaywk7Ltl334ttm41efQoorh3QPrdT MVQTysy11oDbBZcZvsBrh8k3uqiuX7c5aHMrO8E+kJ4juep6q+VN8To8xSVRTL8i FCUHr0svtANI8IMnAgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FIKLc4VOd69KPZyfNQMSSQD1Z0bGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3Lm9zdGV0cmlj aGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA AAFuzw8PFAAABAMARzBFAiEAxzG7ofM8hF86zg4aGThX/z7mtegvAmvGNQ76fAy3 lVICIGHOIstwIGrKHr6tYERvLnUBs7Nt7xgj2hQc/1aTKpr/AHcAB7dcG+V9aP/x sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuzw8PTQAABAMASDBGAiEAkUq1AY+I Syuh7YJ9W8oq3Pp2ecNLEOojhBBO7ixJcL4CIQDr9fDNMXgCAIlFCKd83TUlKpjH OHu9qW02Nqy1fQI6izANBgkqhkiG9w0BAQsFAAOCAQEAD6Z5EARein4ZjfDCtn/+ fcPI+nr5YU8Yc5Zr7Hd2w+Sc3E1j9PMlpTpqZtHkUJnLIqzbjCa03YTbrRw2wjKY oLwxbZjkt/8mjI/+vENmxrkXgVp1QC15Ms9NLZv6eeybh2925VC6U0uh6m2HUgAT /Pm9Gf5jdBFowt2Hp8dRlz75QygVaLkLdGT91kelOqIAlDW8iXEoBksL7htgrid3 S+lfGp6wIEjIGfJzhlOSE3ksIOUFRjAx+kRgdoD+q6qNbixoQXUcq5/ytH1H3drH NnnR86gWZ35kudqATt6hbRncAms9gssdJMGFhcLt927ay7xYmn3zFC6YKtu/mNnM 5Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr+mbsCBKIHg2nmGRAjs+ 8eRPDM5e8MU75x6OShmSJaMlF6BtBiI0D2Jv/3zNKvWJwGoaWKmfS9VLCMa36ky3 Q3cg9k/B+StlPzY4VlqWKhi1NBHoSDaRkP2GMpOoyOqOZmqu2yLx5wVbQzlZEEpY rq89FkHvOi2P1QIxy697/eu+f8Lpb4luBMKBoqVbE+IhcubVa8k5qzIwTp+rahUD ynO6SY2PozQwU6y9+aKJiGmmO8P0cHfwh7hpmroYpX0dIrZ92W941jMouDj3pOm5 XgBkTq4cEsK3ADecZ6jtB0P0I4E9ozvbA/b0AuVFgyznRskKOtLP9bnIuMxapOEl oIUwgyZwtjwI2W9LA8DFVNtZpL+Ftt6DfM3EymZxNyMWv0aG7ZkzQmeBcQtubmDe Y8tHKY+7j5Gf1QzE4WkcCymCyFi37EgpxqkVgs0kftRQdGl7+IBPhhUobaAbGJ7X BzRj3ecXjcov1KaHagx+C7cXKCukUPzFozKJQIpNlVLnbLERY10h2WZ0uDYv7WjQ QaiPXZmVJ74/wmwZ4qtv2jP6hH2F+G9CKU3MQ6kyNlrLCTsu2Xffi22bjV59Ciiu HdA+t1MxVBPKzLXWgNsFlxm+wGuHyTe6qK5ftzlocys7wT6QniO56nqr5U3xOjzF JVFMvyIUJQevSy+0A0jwgycCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 363733576060576226529365226495443607850714 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 02:58:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 02:58:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ostetriche.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717660517094030388315443541699651185880261755908262429749147145161829518675940195507740140124862172249180679061440726736632800825161359242544671614057467986514309809242849262974538775905491985978663529795955470487821305513374295385228557348045733914669793812406659944574207224373863092223230535037681843901776786150642818842052312261570423534675460881671557740791469155216388749215007171340979099406782743320025532571302209381570570380244417108671687050648516011335467303704496497367128462076895867010573340029416763672474615326722000926262489206410568097269656676059667554096946133213533730414203196715621351545759883003037098223566192362113117996562257954116634339601926095440279348399545413994344657255090043723019867241309970572637910426609800611846460566636266948782317335800978896936768335694196531015233205608486612124669854465668172017195580673629083524658176969325059573765428297204933077738308067772641252374338813488239607784590316110142507928005226066142427894871121189086324603371211538076206582460573921507466395869538589333312698590888279126703490640121581499870717191869050207565358439632309912129739521928802536472327459429967506142252262126480654180369962745104715594054610582813657947751810250678108354026773971751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 828b73854e77af4a3d9c9f3503124900f56746c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostetriche.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ecf0f0f140000040300473045022100c731bba1f33c845f3ace0e1a193857ff3ee6b5e82f026bc6350efa7c0cb79552022061ce22cb70206aca1ebead60446f2e7501b3b36def1823da141cff56932a9aff00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecf0f0f4d0000040300483046022100914ab5018f884b2ba1ed827d5bca2adcfa7679c34b10ea2384104eee2c4970be022100ebf5f0cd31780200894508a77cdd35252a98c7387bbda96d3636acb57d023a8b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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