mazzucchellisrl.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d0:48:f7:52:2b:67:05:67:e5:2e:f4:5b:d5:e1:d1:cb:07 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mazzucchellisrl.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d0:48:f7:52:2b:67:05:67:e5:2e:f4:5b:d5:e1:d1:cb:07Serial Number (int): 332212578694452794364349411448407979051783
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e0:76:8d:87:b2:1e:09:14:0f:52:81:af:18:db:7e:5f:55:ed:87:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 88:9f:97:57:a3:89:d1:b2:fa:d7:aa:37:b8:63:fc:0e:d6:5a:f0:45
Fingerprint (sha256): 6c:97:35:ba:b8:2c:89:d3:01:8d:39:5a:74:cd:56:d5:7b:b4:73:4b:31:3b:b8:39:64:40:6a:93:09:f8:ff:74
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mazzucchellisrl.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mazzucchellisrl.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mazzucchellisrl.it
www.mazzucchellisrl.it
www.mazzucchellisrl.it
Other certificates including the domain name mazzucchellisrl.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for mazzucchellisrl.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISA9BI91IrZwVn5S70W9Xh0csHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTgwNTA5NDdaFw0x OTAyMTYwNTA5NDdaMB0xGzAZBgNVBAMTEm1henp1Y2NoZWxsaXNybC5pdDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSlNQ817WVvNVWFj40B54Zoz9Ym JA2LQBXhic8mC+Jzw6y3gcjs/abc0UpJ63cPF1B9B2I91TvXA/RibqTUHo5UFRaR W1Jq4vr8yTzFaThFOhc1a+LNO7yfL48oKySmOzaEoZh5J0ddwqMnazVrpCK9WyLq VrkC0QuCPjgERBxSHtRS9qkQIJgvGtg/5IMnA+20IUlPd6tj1UPidnyUQJgkPaQs xS4KDWlqVTmeHXWNu8lQGG0hXl28Xhl/jKE2XBkr6BBcmhx22fBmtyeCrKnZxiuq BlV1MQY9UQARDYoE/9ti+lZLDUIDg3YdedVM8w6ICM1Enpv5O4aaBzbWWK8CAwEA AaOCAn4wggJ6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4HaNh7IeCRQPUoGvGNt+ X1Xth8MwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzA1BgNVHREELjAsghJtYXp6dWNjaGVsbGlzcmwuaXSCFnd3dy5tYXp6 dWNjaGVsbGlzcmwuaXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3 NXnmEHvMVgAAAWclcHkoAAAEAwBHMEUCIGlpNE5WoeQnOPoIUj52TZ+fQ5jDCuxz xnG3YsIdkKLIAiEA9K+d8b+AxTU7dNUTCQ8Tx2kCWcDPDb3MUuUSAP0q0bcAdQAp PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWclcHlKAAAEAwBGMEQC IEYJCJkkLKVMHSKYlInvTVsbIlxFhyiJQ0URKw2HCBhWAiAuSv+fYXhWlRda8sIV 7e0hu6r3dgk1nacCEqEf6ZBl9DANBgkqhkiG9w0BAQsFAAOCAQEABoJKIH4m3n9+ SJ5uu8HWnINDNzRwmJ5pAS3awGOAJDPdn70FWjPjPgFZ2KZl964xwAWVa10EmJs2 BqhyJm2K8REWiS6p1fYA0xZqZ+bfXgfy6PqdzG/OY/aVQux/wGxOQbdyizRKULyF 6FgMvhSoFXkVq1xjnuc9g4plnTKOF0Rn1eMPxBTE1tuXywl0CeO7VHHrkP4wJW2W 7TC4p6Y6U0yJdnUO03KbxDpktsTZuACQ9Ei4DRatTzzuR9sdw1zYCMwBCCxY7MhZ rF9oFa1oIowcFK81d6k61KZRSzyzmM6BG7Rax1EKV1RemwYlhwSyc/vNTh06Pxti UC1aGAX1Lw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KU1DzXtZW81VYWPjQHn hmjP1iYkDYtAFeGJzyYL4nPDrLeByOz9ptzRSknrdw8XUH0HYj3VO9cD9GJupNQe jlQVFpFbUmri+vzJPMVpOEU6FzVr4s07vJ8vjygrJKY7NoShmHknR13CoydrNWuk Ir1bIupWuQLRC4I+OAREHFIe1FL2qRAgmC8a2D/kgycD7bQhSU93q2PVQ+J2fJRA mCQ9pCzFLgoNaWpVOZ4ddY27yVAYbSFeXbxeGX+MoTZcGSvoEFyaHHbZ8Ga3J4Ks qdnGK6oGVXUxBj1RABENigT/22L6VksNQgODdh151UzzDogIzUSem/k7hpoHNtZY rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332212578694452794364349411448407979051783 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 05:09:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 05:09:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazzucchellisrl.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28863800270124256119461387302367239921978456462562597617856588283021032662745639005613455700866099111934110924465942215468382466491013276341772791370877656148978361152568484232032361046236464792646700763332362830093866745351401670016890883873922245451336245084111575857874691064102093713733934455722812592070922047107267716439760578672488774024953239584700535908437422063795049010393440139629370916864232386392217661438646307255591313152054476712697598057119120305839627683842379744798870809018249005025748155876521546623521883432378965318940707995060047487476375614233349458776214301381891607353697537051906316589231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0768d87b21e09140f5281af18db7e5f55ed87c3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazzucchellisrl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzucchellisrl.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016725707928000004030047304502206969344e56a1e42738fa08523e764d9f9f4398c30aec73c671b762c21d90a2c8022100f4af9df1bf80c5353b74d513090f13c7690259c0cf0dbdcc52e51200fd2ad1b7007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001672570794a0000040300463044022046090899242ca54c1d22989489ef4d5b1b225c458728894345112b0d8708185602202e4aff9f61785695175af2c215eded21bbaaf77609359da70212a11fe99065f4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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