umbriatico.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:52:f3:ae:18:cb:cb:5a:00:c1:46:7a:de:7a:57:f7:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umbriatico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:52:f3:ae:18:cb:cb:5a:00:c1:46:7a:de:7a:57:f7:ab
Serial Number (int): 345496864379647345709712094732797810833323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:ff:ce:40:de:9e:ba:d0:d3:0a:98:0a:d2:2f:66:c3:af:42:38:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:d3:d6:c9:39:e3:7a:ea:e8:fd:53:5f:6f:57:e3:86:ab:2a:05:bf
Fingerprint (sha256): 6c:08:fd:96:a6:2e:0c:f6:88:79:97:06:4e:75:cf:9e:a1:42:51:21:07:8a:c0:d4:5f:d5:a7:5c:86:e6:ed:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate umbriatico.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umbriatico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

umbriatico.com

Other certificates including the domain name umbriatico.com

(limited to 100 certificates)
www.umbriatico.com
www.umbriatico.com
umbriatico.com
www.umbriatico.com
umbriatico.com
www.umbriatico.com
umbriatico.com
www.umbriatico.com
umbriatico.com
www.umbriatico.com
47051.com
www.umbriatico.com
umbriatico.com
umbriatico.com
umbriatico.com

Certificate

The complete raw certificate details for umbriatico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA/dS864Yy8taAMFGet56V/erMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjkxNjIxNDFaFw0y
MDAxMjcxNjIxNDFaMBkxFzAVBgNVBAMTDnVtYnJpYXRpY28uY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxeey1jhqUzGtONB5oHoEfy6yEqzzkWVS
R8YGvVA7Y1KwUgL+55Syse+aRJfSU4mAmEsUEIrRIk78HhMlPaGQXBKWTT3FCWty
Wt4ZNIRYPTxOvh+EV1AoUG6TWE7sElVc4OpKpdLOe/0BAOk/PE5OnO/+4Vjo3gaz
04cRGmQbehK/BuvAtiTqvRKFreYtMau5w3Va2MheZqhDjC8Ud9L3FNbgsMIhQkbE
zhVXk5j264SHpEvwK2awrPv6GVl9vorX6R/6sHhh0aUtJQJJpO6tKPTEZx/X5aD/
VFv7hOP80SzSWjhrn8zVy9/xxC/NluAFHPoH1SgotMu8di0womtwg6mfJwo6ImbN
Sn3ICneWj9IG3fhX+IWLzHIEgdOoWZ/iEaCzktN4Utmt+zyXjixh31cwv0bG08T/
H49/nrgYVjxNhuAuPp99UkX0og8KZCs7wum0uWHD+RZeRzlSfv7mm8vEvglDYAgJ
ijfEu36yO6eOrd1mscXA+2v8vxtdj7yhygRf5iOSG9hDYPV3Eggq/FKaYhjVGDJY
SZizC/SIGzmWeLO5QsvZTmaxTmTMAqpr7UpYhESzgiO8zYX/oAJKnSId9JtfBYDb
BOErrXG1PzZCgtVl1wA1ZORDozWhabP31bB1yhNOJxEJGXe1H4GZbh0MlwEEdguy
ZcgGGQUvFJUCAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUe//O
QN6eutDTCpgK0i9mw69COBIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg51bWJyaWF0aWNvLmNvbTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbhiJmacA
AAQDAEcwRQIgNSv08hcCXMMmIH7vk+3Yzj0r47/XrNuiSyUm1PQDvAwCIQDLNm6U
1VAdIDbh7PJrgK/3Ihwuw3m3APl+mJcrq1p85AB3ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABbhiJmZMAAAQDAEgwRgIhAORoCD49n7Fch9usIQGy
GtOkzXsRK15ItUvANHA9kX1SAiEA8Jv3n+nysX3OBra/AUI1U1kFWtmg1g/Xqfhi
sSm7i30wDQYJKoZIhvcNAQELBQADggEBAA2oIok1zTEkuPat06DGXUWfsdE9v4tx
6sNni82Jr8A8Q1nBDdowoMNUxxZE1bxYhHYTp5MVsUlqYrDOhbea12ustvN/6+KJ
qQgYW72FWTYimRl0IJcXa1AVBmlbLXYM06J+TBb2Cibu+M/Z+7AK3X/TJdNh33aq
J95E4xrJKVUWwmYCtCy4MhY5W/yXy1fgEJYQMDsekW4xTORAmUYbcjBsfQImXqyt
6qna/cNEX/zrwWEnSST/qy5tXis1Tvis07nROw0yldU4JQfCBDjIb09iSQ3LOajs
e7RHImfmIKck2r9P9XOjkvnKd8Jpigvx/1CuON0tVVmcGv6BF7IsPZI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345496864379647345709712094732797810833323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 16:21:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 16:21:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umbriatico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807382255394256511150794969155427831005841465211521300671745259124160328600847459241280904723039793217212964397008858704324786185633897330995073538422888233788493899422167056678800539971250233085723661381368196910181549751036935963709718383895594740502888863913176362436447844468694905326582959135783110992795020491652288997041476842135752676857526019130180400796450677473114765241690549970260428606446727118867200882317421773382370038833157811709314939625030511998773288531684229047555274600455033457496298148472317554560409039589536998513938239492729162557919913308718020193979806829297598216987973091554309065540434829235349326605424303054661219481169906868367196470233626479285748618536268932540380260082027422210562911220745090661599997067356407957623388204721853747577086160786543585631521935156860030851925346439096903221287045191548556465888942335544231013542543345659310700974779486628882552786822129887296207483593300388341623104593276026082522460794310512798197477876236550333794276291033644780557470314530279971461795949610472007871215985245537859158370198266717049961386303016608550422931191312914048612480950434930593020340079711671412393509464215386379968555001139160488093874235617301765330883531826948185883308659861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bffce40de9ebad0d30a980ad22f66c3af423812
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbriatico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e188999a700000403004730450220352bf4f217025cc326207eef93edd8ce3d2be3bfd7acdba24b2526d4f403bc0c022100cb366e94d5501d2036e1ecf26b80aff7221c2ec379b700f97e98972bab5a7ce4007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e188999930000040300483046022100e468083e3d9fb15c87dbac2101b21ad3a4cd7b112b5e48b54bc034703d917d52022100f09bf79fe9f2b17dce06b6bf0142355359055ad9a0d60fd7a9f862b129bb8b7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000da8228935cd3124b8f6add3a0c65d459fb1d13dbf8b71eac3678bcd89afc03c4359c10dda30a0c354c71644d5bc58847613a79315b1496a62b0ce85b79ad76bacb6f37febe289a908185bbd855936229919742097176b501506695b2d760cd3a27e4c16f60a26eef8cfd9fbb00add7fd325d361df76aa27de44e31ac9295516c26602b42cb83216395bfc97cb57e0109610303b1e916e314ce44099461b72306c7d02265eacadeaa9dafdc3445ffcebc161274924ffab2e6d5e2b354ef8acd3b9d13b0d3295d5382507c20438c86f4f62490dcb39a8ec7bb4472267e620a724dabf4ff573a392f9ca77c2698a0bf1ff50ae38dd2d55599c1afe8117b22c3d92