castelbolognese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e6:09:30:ce:7d:49:ee:b1:c2:6b:dd:09:69:61:0e:05:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelbolognese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:09:30:ce:7d:49:ee:b1:c2:6b:dd:09:69:61:0e:05:49
Serial Number (int): 426726304589170886733688545647997882336585
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:e2:40:6d:3a:4d:23:45:ab:25:34:c2:a4:41:a4:99:d6:ad:b8:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:90:89:15:43:7f:2b:52:3d:bd:d9:d5:48:55:5a:6d:a7:f7:a0:6e
Fingerprint (sha256): 6d:88:83:56:24:29:83:49:f7:9e:22:2d:60:d6:14:1a:66:f6:43:20:02:94:ec:d0:4c:50:e1:3c:c2:dd:dc:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelbolognese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelbolognese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelbolognese.com

Other certificates including the domain name castelbolognese.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelbolognese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISBOYJMM59Se6xwmvdCWlhDgVJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDYwNjI1MzlaFw0y
MDA3MDUwNjI1MzlaMB4xHDAaBgNVBAMTE2Nhc3RlbGJvbG9nbmVzZS5jb20wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDlA3kFWKklVG8K4PJPEWG/nF/m
EsKCdIkEpi1uja9DOz50RoHz93bj6PnSaNLUtTz0ChlW+AfspmZjBowduoubpu6a
rpDU5v8MI1vSW9pE4XDg7MixC9y3ijD0vtoBObIAg6130t4t4036y3+mJPzwgfIr
+VHNIQez9Hw/ab5/W3EsDs+cjEfak3AEKFLrjWbtU0hOBUqZ2rRiRU8+S4wOf6EW
0FND8EsoK0uidF0oscX8vbMb5XSjAci9LLBaFUfuHi1Plf9+0kEDJMQO1PfFQrX7
SJZtZUXHEss3fLNPDybgMTrXFhvjFx1CYgqODGqX3DO8TyHxh5tGJ0CUHNglxc++
6Oex7wZthrLjt/5zAJTjQO1NAKFehuQ4EYF2/OyMeVZpZePEQNPO99bmJ9GvAOEB
zpdYmyEvfv/PH1n2Q3gc6oD1i1wjAq6aqNwHWE/fLNX76aINSZTdCMUOZotyoHyF
xBqg6tr/mHIn/3GykAac1zS1hgmWfWz4p0xI2ySbqgc/0/RDm11SLY+SUkNIm78Y
BHpb/7cAsKLE+pkrbbixVKUQkM9v/88RXpEnOrbTufh9GIQwCcb35kogJWVl8n+7
Nh9/g5B1CQFW4EsmNMQTPVI0LsCnoKBQsHo3qUJRmlTkIPi0Z6LEFR48ZvPX9JaC
4H69E4yMxqzfIHYGwwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTR4kBtOk0jRaslNMKkQaSZ1q24OjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2Nhc3RlbGJvbG9n
bmVzZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y
cwAAAXFOYWpaAAAEAwBGMEQCIE5tJ7bz3IgbJIOYcKNEF70OQT3fqIb6ERZ6g1r/
Y+bdAiBK78cHpH5VuJO+qbHSFhMLQc2Zk3peN2ME9H7lIznkrwB3ALIeBcyLos2K
IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcU5hak0AAAQDAEgwRgIhAK43U1ec
RAZ2PkgJkDl1NoGe75t0NwI96JmzzE7IBb2AAiEA4ggKgJZkg8LUhRhYpl2q9HF7
oWS/ltvryTpoEeSVgOgwDQYJKoZIhvcNAQELBQADggEBAHNJhmjH3gq8x29QmY2x
30FCJ09obqUnP1eQCohDPIbg6OEBQE0fKdcUpExpL9jDWPxHkzHU98fW07agyQoY
3BTlXF+fCrb1ksGejXt5Z081wp5v+24pjfCOfJxATIjDBcMgc6l3ohlUK3+s9MPk
3GLOzsIsiMcQn4/F5XRdbBBVzNtoOZo1QNSKBHPh8hscpVYvV5ewVH90n91sEb1E
ERH87isHK3iAVdu5juQA7CRuJLCUQh+Qlfc2/FXA279Wbv0/uJzngs6LaACrF4dv
FglHf5cHc31/sYaedjQBs+fQsoic7XBld0FQDnQVwzkO3ArXCVit0yE5bukdHExZ
QQ8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426726304589170886733688545647997882336585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 06:25:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 06:25:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelbolognese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934293833507398053059702720414479276873673732520123672124999783307497434717725618052107051228752378913752114633306285733872351722703677296048234458398130025387915585520098220308590228172512388127334024363613062953213791802911585246069680187017766916271499109732627573710439896546387672884358515757302163377663982557864455929744684141446796619553967618320165541887777473670314106197087456059398861203200857234344795100802210428334601356630931888025907108405470150107613815124688413148366318107714076288869582702229538385619829203572315855296200559591746419683669746198825485037159402035051132199294203644593790052363618948219081788484757494138361138844217998953632085157793486854438920075886912668587072891252969094799447095174389981761863420179746227942932098297773364202100706701320525210767523868312838758598537801782209382783311567287792865068228179300024653813775382586135809782905981458064675600127608451514575197246922208609452577804071404822985540324345712003396484310836295390379116676830582089916021441656569392159258697147995217440946394984196975937791907016873850852538376636349918787713742706013873313363129223788519204234276029623712329156043853335282944627514503375773091235416422716896365753810431756126177136565683907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1e2406d3a4d2345ab2534c2a441a499d6adb83a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001714e616a5a000004030046304402204e6d27b6f3dc881b24839870a34417bd0e413ddfa886fa11167a835aff63e6dd02204aefc707a47e55b893bea9b1d216130b41cd99937a5e376304f47ee52339e4af007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714e616a4d0000040300483046022100ae3753579c4406763e480990397536819eef9b7437023de899b3cc4ec805bd80022100e2080a80966483c2d4851858a65daaf4717ba164bf96dbebc93a6811e49580e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073498668c7de0abcc76f50998db1df4142274f686ea5273f57900a88433c86e0e8e101404d1f29d714a44c692fd8c358fc479331d4f7c7d6d3b6a0c90a18dc14e55c5f9f0ab6f592c19e8d7b79674f35c29e6ffb6e298df08e7c9c404c88c305c32073a977a219542b7facf4c3e4dc62cecec22c88c7109f8fc5e5745d6c1055ccdb68399a3540d48a0473e1f21b1ca5562f5797b0547f749fdd6c11bd441111fcee2b072b788055dbb98ee400ec246e24b094421f9095f736fc55c0dbbf566efd3fb89ce782ce8b6800ab17876f1609477f9707737d7fb1869e763401b3e7d0b2889ced70657741500e7415c3390edc0ad70958add321396ee91d1c4c59410f