www.mantovane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:ff:cc:d2:cd:56:90:f5:c7:0b:aa:87:03:3d:9d:b4:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mantovane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:ff:cc:d2:cd:56:90:f5:c7:0b:aa:87:03:3d:9d:b4:f1
Serial Number (int): 292642569828145015806554648230082035692785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:72:73:4a:d4:1a:08:7d:6e:45:67:fe:c3:96:9c:3c:08:2b:b4:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:ed:00:df:4f:6b:c0:c7:5e:fb:69:fa:3e:9b:e2:ba:cf:6e:0e:61
Fingerprint (sha256): 6c:39:38:22:a0:15:2a:a1:07:fc:b3:aa:9b:21:cd:75:b9:b8:65:77:70:57:20:0c:be:6a:a4:3c:f6:1f:b7:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mantovane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mantovane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mantovane.com

Other certificates including the domain name mantovane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mantovane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA01ACw/O5Sz+XcQ73rJG0
ArAwAlJNWajKHgYogG7n2grQXgaue65mXzhxhw89ZQGEOJUwI4akCDv2zJxp/Njy
/7/iwUwETrMNkvajCBfYYrIue7sBBQI0AK1GWK3cDL5YAU8M2ZU+WTHDsAnM+IUa
B9wQ7DPuKQZ13TeVMSWPlPn8RhNMKx4l3ibrTchho7jS+4/ErzLL9ibAQhyt+tyF
wBkozfKI3hW2uKfQ/AIOR31aGZr0LvSyMfkGs4RLPT1ksr8r4plcJ0kyavnQQwl6
rN0ayRkXzosrFVnPJoWx9mnpfcP02ouU0ORFH+yLD0kWM0oKMMMnnzT3nvDjSLZu
dAnqfdPxx60FpVSHURcjN7gOl8UpYe/cDpsMqoMouOs6tF8MTRUIE9pMAUI5fBNG
ZNBxbsrBtMp5aqyCdbxUmpUNcwZshKczBkE0eyPkzpv+vBrevIMSvRRzdqwMoU/z
OGaI5WvYYuH89i8GpmNlF1sfXQ9RWbDwxbgCLH5FuXGG9VqwWktR4Em3bIZlDKjL
t++kO9IXoSNPqOSGp3bC316/ZmAFTP94U/8643C9dOtw0UQzRXcrgtRaHZbjEQF+
Ikn7hat/dF50jIoCEz0S8/Ghizl8j1oqoELxTgZl3WamPmbecyDu8OhAn+ajrpOH
f1y9iEeZHCGT3XpEAmF29KcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292642569828145015806554648230082035692785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 07:47:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 07:47:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mantovane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862079959273183062583099619536947691104599299081881724949676498844794305570377914355438366619530519389806724939459884203337528654272245491000173256723565869833900282847332225582091171682661494317527914898282364076155713472802137878291933326214367430705474233013934288369198691398746971671524738960135433397775937085721275282290425678432493112104304693922383668928007598976223608379076052301442972557782904188773637536210938933658320286922871991641536296499992714608651283719925817568866924206024449134884665195748265913703348307093503597863048421640709380713398009435729634430096481284910135874037111703038772265204621516047367005173771879314935385060118290957352395784464001079936191669943006591732895826759768826756418786050471699100272639431983249981276261926043824579722943569023093217307088322269177191808424414802245285434415131591693531727493216114635916969810195147784356972990756773723805675511034093496446398444325442226446819112609888685835071880106020887785991044124320795591191963433324930456660843237792979780271471253023470205109629951203494294956259695304079394410768050132241559281838185176051091104080126007363565304805906695981002646718374888046528144809573661006942572982088073113118775658866372379133025589851303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb72734ad41a087d6e4567fec3969c3c082bb4a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mantovane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de859652100000403004730450221008a41ae10b4fd25481568a5fe96d0c0793bda7badd16229afa40b1f67bc00ecca0220611ee7feb56ffc50c48d200bfc00678db63f2335273aa98b9b75a2b15f50de540076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016de85965c70000040300473045022100fe8e32566e27c08178e024c18dfae1da953559faae80964808eb4a238c5c4d050220669d8024136bb1b8771b40bf80e7a861598b8581ba4e9cdaf9ef372da332aa7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00851e6f47369b765db5052010237ed551747298c28e5ddfea6749f8072a0c96f363eabd5a5a067433e02ceafe98aa0671dab6eaa95106067ac0a08ce3c31df4ab037fb3b910b455f8ff5b6a89461487888bce449c1f0371d916e1f30be89471d8607c0c82d5118067b7220cdc5d55487ec891a33426d04b3c22f511a018c1a3a0481bdd7116e627c059946ca5889e23d03d32a7f89b221dda2390882e6dd33a8d866252fd8d9cf4355e39fe0c7bb2f16aeaf11be7c35bb1ae47df4d258ca8b0847a7108881a8317e6c2c2cf7546f3502e2866aded58165efe0fd38e4b635e9adabdb439a3abec7f724c10cb89912238730bd036e2638d5a45ed7518cd56669a7e