www.falegnameriaromamontagnese.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:88:a9:c9:51:55:97:80:71:f6:08:0a:a7:49:3d:f5:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.falegnameriaromamontagnese.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:88:a9:c9:51:55:97:80:71:f6:08:0a:a7:49:3d:f5:f5
Serial Number (int): 326172164099063189820336876351323782378997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:90:86:a2:04:6a:1f:10:fd:77:13:97:e6:15:cb:22:a2:df:2d:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:a0:9a:d3:6f:cb:85:45:5c:36:6b:7b:36:1d:8b:c6:0f:9f:24:3b
Fingerprint (sha256): 70:1e:07:51:cb:fb:de:d4:7c:2b:03:8e:fe:ab:ea:cc:28:a3:50:e6:94:90:46:3b:4d:d3:5e:ec:fd:44:e5:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.falegnameriaromamontagnese.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.falegnameriaromamontagnese.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.falegnameriaromamontagnese.it

Other certificates including the domain name falegnameriaromamontagnese.it

(limited to 100 certificates)
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it

Certificate

The complete raw certificate details for www.falegnameriaromamontagnese.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326172164099063189820336876351323782378997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 17:22:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 17:22:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.falegnameriaromamontagnese.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 598981986971576939422362622493364274388015902389755248348488926075587049240976509503909289086642963313818193964004646157647180139411639683418726865891322987506512494815281797747281680025426570074547867990862277991824752893925287443862084699535165055123619965023224006602626786940230363074399689872782801873974913904660238511517834706934205724382229068026578750017441706711521553097725211609756476173689194794618252687573821081703318289847139597486477295075167265427752957772345471984507132139195190359821162642307173348087016822397687588407880266240848049892398100450687564754052930161785892503525851832588339269209937171022183261350962761579473749958931726544731685544857598514762596928920617248550990511914218249111011966170004167101852758385442865572183960202061154244187335758179327382156590416705421639009677892903516181285261183152276551761795819877861904260119393094096122112825395543761058627659639479648385893574455400452812944867807148176600492171195214840714146467535243947962807221946401377048523970574773647307817199064095903997816024544424406592219046844540740416357225130103598016434479801369548765646206541841050730497579067996421139910468952284908937134284256166955540194751695811546587189578051475820690100223102603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							799086a2046a1f10fd771397e615cb22a2df2d6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falegnameriaromamontagnese.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164dcfa9d360000040300473045022100fdb7953490388e439bec5fa8dffb6b78e81376a93757f72e6989cb5ab6749c2b02205336dff6fb355e1b1070a08145341fdd249eeca19c1cf905883f5c681bda7314007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000164dcfa9d37000004030047304502201560813cace75405f34f8a49b001713393882a12687fef6c5255f9e4dd97b94a022100f4b75ca26701ade8648980e9f75a503a24f82047e8658fc2e1960893d5f77c45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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