castelguelfodibologna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:ca:16:c5:24:7c:33:21:ae:be:35:46:a5:52:fe:b0:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelguelfodibologna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:ca:16:c5:24:7c:33:21:ae:be:35:46:a5:52:fe:b0:4c
Serial Number (int): 302099081743077201589936443636900746408012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:62:14:c1:b8:33:b6:d6:35:f7:5b:50:01:35:30:90:a3:ac:76:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:ce:02:1c:97:4a:29:04:f5:e1:46:3e:5b:82:eb:23:d1:72:4d:71
Fingerprint (sha256): 6b:6d:9d:ee:56:40:09:6a:7a:cb:4e:20:e1:ec:b1:df:37:e6:1f:ad:7e:21:2e:cf:30:b5:95:58:36:75:e6:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelguelfodibologna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelguelfodibologna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelguelfodibologna.org

Other certificates including the domain name castelguelfodibologna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelguelfodibologna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302099081743077201589936443636900746408012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 22:21:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 22:21:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelguelfodibologna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802871401843440151055891168165016951817429790057356851391489560863090084621106644364046435229268853800956542079005073873635576231259531249239546097747403777349141406408045639548419225922281839871885189458808807353244711328380899319605103724300548084542611214304757461566520832875165478450586612227358653394073542684380908052845824317683553719396697206813265031484535586047713807545057639011576867100341671152011521768733465967412826838180275807626871336256642192004039131202231350557307642285521656876719061125958786091415189039948548893690655594527492900561135346871516093211237483868498490294901354101715451440426034991009129473557365775336339501782968126268029229103948724619991926433539400427929639829644317549159751096189032257286070070679159472167789302657081982888405586843457163333186111412704006236318453511625163111508336993840651178021410827163282938242611355145891508037744596646677686597643274408738876208853145722904519791817242301702502824354406134010418407734893127377208514735145966039313647408824122637556218792576211618145454218353465569696731880744001129896976652755181692602055946246417615616918241050112749708434843319491292375416118870284716791876107996715663202269839428223187318765280866858733633599836688489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a86214c1b833b6d635f75b5001353090a3ac7602
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelguelfodibologna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6fe12d310000040300473045022100b53425a583fb77f368952e3056d9d5a042d674e33eaff255aabab82b2d969baf022046ac8b7010f369e44535f88448269c66e80af24c7a8bd1b158933088b9aca2c0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6fe12b6000000403004630440220296e366222933401e02387b879f632ffe81d161120750751be3d6c4afdd7772d022076f4ef895baee026155ea394cf8d12041da8a7a2532dd8771bfcd337d462eb14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004be4c58c9b48f3ca0f372b12103e789e190b7e5e1b1aaef7f59cf15a2d8f9af9ef9e533538175e878e48aa0758b16238684d8d5cb1a0ba41e99f2cfacc9580df495b282151f427b418e384413e4cd6c44fd13e7f2176751bea25248c319c3fd6e4c3a6e1c4c3404f081157c08abd8f92abcb5bbb2e2def37615ba24520bca57e3da08d2a2577971c3e20d0f7d2b882be6b19e71d90f979e907e9dc467fdcb65f1f93fc78335551851deb95e8635d5d3a2987f966275340080a643e24e63f9ad6ec79ea3b406a2bfa6a9e1ebc934186e7f7349f99457935ceee16db5c457aae6aa0378d34f67836ceecdf261224b3c36c9ae72e92edc70eb31be3a8bae35211a8