www.trenini.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:3d:65:16:f5:82:13:3a:6c:ce:0e:7f:b2:5f:a1:d3:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.trenini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:3d:65:16:f5:82:13:3a:6c:ce:0e:7f:b2:5f:a1:d3:d9
Serial Number (int): 316884491398783468763342585215754520613849
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:ac:ca:e9:3e:82:65:6c:89:91:73:c2:0e:db:33:fc:7f:08:79:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:1d:67:e0:39:29:b8:52:cc:fc:00:6c:17:b6:82:90:57:19:a6:e2
Fingerprint (sha256): 6c:17:84:97:4a:46:30:8d:e3:46:09:a2:a9:3f:e2:b6:1d:af:f3:16:a9:95:06:f8:13:cd:b6:a2:df:44:68:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.trenini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.trenini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.trenini.com

Other certificates including the domain name trenini.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.trenini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq9smjLbrXU3eiPciZnqL
VKmdvHj+fTmQCWzBl+AyQ5Da6rUa+UUFHBPSavHNBBFu2dZPJC1wY9i1D7XPWfBR
j4a67Lf1NCDhL0lzcV/HcfaZgRFDIB8Eu0IHMEgPiFnuj2DgXQRuWR88QBnrDpNe
X0yLiZw6kjkAGgu9NAJcKaTZeHeLRhcC+qJBDIAL33ACT5BYQQfhNjft2568U+0G
EKnUSnADjEzGZaCziI2E+b23QD/D/kbB/2cPeyw4d2e1S+2T1YwUtEn1B3LO4bde
Kc2MyC0CHR9/HWNWNF7f3SVrgJEfUGpaNwpF8kkCni5D/2iGUul5NSPCleaDa100
joyeIUlkJonz6+eqnm9CH1yzuIIvq3wsppVnRBxddMMNCSZpUZhVEjN6ka3RoVf3
U8MdKF/U0He2FqPZjeF1YY6mY5reDmL4ZvhDLTdYyQ4fVNd0WcRAx5dtQLxolugz
2q+ZHiIX3YcraVNtG5Vaje+e4/MJvkUrl5/VT9AQyNkhAxzZQP9DmNvTJ8Rogdz3
+i13Z1UX8wL+cteCNyCVfAO8DJa+sQg3IlD8WLjSG/GeK/WID8tKH3dX9/8KL7sa
e+X89078x3v79VDri7lxuwe4prhadJxF8Y+R/GCgg8jziLGjv/D4iLIPKbGJahDD
4Naz8PehBju+2g09BMJKiokCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316884491398783468763342585215754520613849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 09:55:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 09:55:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trenini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701111543375982506061432258957604707458485180085159343848139814104707582212496822978722791082481375890073716786099602201918904111392703780455230485728856392646028174441089035587060414435407837998327333346540611141913609507277170778718097502620066359320523490574712046764660032442085595446104605573818653507262706924693587731601550086938277611207186615598259371089379679654744885629787303754703637255404162504062373029054927583071381397850707391720945763420314678640963854927421764814850789881464681897029258402432829993230213274049920234643121032903700360382847811292460203365756809794352585983146835878439349288818277146656720818781097838720064153594105983538551166959956731002756845170977852715296302356873126816933497921430733462120314054871633177325178420348346476934055821240088932127076706988310273826278800159058422713128942795021937950635769140511576915066761831836923082305864455940481271493938426524958947486370388260892627952204965056862552946900344673202786502181188828011214988468921393899982310397876562473692570657694174807339811258866789764446830350924860532809358456496409137858071644325238733315358647143869107055943156477654145736528511492281113608919424876612023900777437553638376500463816815504877553446030051977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4accae93e82656c899173c20edb33fc7f08791f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c383875e10000040300473045022100f14f6e8420817504f4ec0037ec01d8469ed8a20074733f7fb24bf4fcbd6a10240220385d5cbaf916e4db5c5d07e395e0cf28b35bb9b4289224406ffb71e90798eb30007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c383875700000040300473045022100b3be12e339dff58d7fdebddac188e04cd2df6730832cac164c8eaf92c467ec4c0220140a0722e52abf8b29e10a9f531d6d4a7b5ff76a1c9fd6fe8d6fd198fe750011
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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