www.sangimignano.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:42:d1:0e:9a:41:dd:79:f8:9e:54:30:84:2f:6c:8e:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sangimignano.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:42:d1:0e:9a:41:dd:79:f8:9e:54:30:84:2f:6c:8e:b1
Serial Number (int): 346836546426376788248321901054472489832113
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:1f:04:2f:52:fe:80:fd:9a:d4:da:73:e5:b9:e2:bf:6d:25:8c:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:e4:cd:b2:19:0c:1a:72:5d:d7:92:08:ec:b7:37:d5:cb:ab:d5:eb
Fingerprint (sha256): 6c:7a:9b:ec:bc:11:6a:26:11:6d:d7:30:13:c7:c7:57:0d:c4:ac:ca:ab:d1:e3:e6:28:52:72:91:2d:cd:e0:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sangimignano.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sangimignano.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sangimignano.co

Other certificates including the domain name sangimignano.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sangimignano.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346836546426376788248321901054472489832113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 09:31:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 09:31:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sangimignano.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801396002043814388141062278404987451983775618493738334484800315932296643666064002998273156886781566431449702441510575304833382392778994473297788048234116992999444813724684177920350523568974834500628846058460119115927423422111506773788717991482802676067270533029710155420414593344061164486233582457197100329776635592722419020559246296331714265455012001047036393059193581287319990157040953288965747890508301161358992340400374308976389388022505558002874696565263606839268796272180719629783942076882579611424565151674085372306775666300950538308200879449232869693684633557875635228828869136367475696677615725747551813437615258244026626903602198340569090668543013554642409167182527608006234128663788918191887780532271876997684420871436080558782705568218358096979641261592071623533286793843705926324967198318352890588776183420767590253453616104296255321637311837345284449167765247827905966250978245521993355612275288089676717574070051770156081026435373302895019122197191682004729686382546959838781395195281731417820076003876640789915682255935622211253391555376833808213990585142901497192840454144307939042699227055537592531296708011903561857329979074477589961459766747251237594443984284585114066694286646765084660511268233701833407805540221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa1f042f52fe80fd9ad4da73e5b9e2bf6d258ce2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangimignano.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2dd5e79200000403004730450220691716bdb2675da1be1567c354a5eab288fad47e22e201809bb19477b7685c4c0221009318eb54c7660156eef7d612b6bf0d7acaf78532a07104ce3f1a24af42819f01007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2dd5e7af00000403004730450220576ed4dc2c36faa6b7d0708c4ce8cccd715554f882d00210cf29e90896ba4d87022100a378c3bb882ff95ae239fa9b549cd37500df0e2b5007904a677ecdd17e38946f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001914ad48ab1a219d26ff016aa96e189bbd9eab473078fcbc2398e1dc96fdfcbbad8168fa56f7732e8fd6a5be250dc8dca9921755ff1dcd20adeeb30dc718e314243da22447b5e17fcfc985e4769cf2db91683ce0ab65b9e47e6307deb9c434083d762b1c9a0956ff52e9b014be83336a65f65ac755a983b0ef647bead849cac984957100eecf564bfbef01e0e7a88e682e37a9979011f36a65a323e31bb413dc27a9113284576975fc47e78674cf0b50211c58a72fbe550f41a22bd35e16bd0a85352f95080d98aee56e4b1009cf9756fbd21189c1e73c97c713bd765cd1793b05abaff1986cf3fa9ebf0e749c3e7f82a879eabb35733a9d8df6d5fcc783a044