www.pavullonelfrignano.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f7:ab:d2:59:5a:6d:0c:14:aa:19:33:6c:82:ad:1a:26:40 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.pavullonelfrignano.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:ab:d2:59:5a:6d:0c:14:aa:19:33:6c:82:ad:1a:26:40Serial Number (int): 345614992606670791165441681121854021576256
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 48:1b:8d:d0:8c:b4:01:ca:77:ee:4b:6d:9f:42:0d:ff:d5:51:4c:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7f:70:31:88:0a:1d:e5:b4:b0:7c:bd:26:25:f9:e7:d7:72:28:cb:19
Fingerprint (sha256): 70:df:ea:64:ae:66:7e:2f:7b:51:c9:90:26:54:18:52:5e:56:46:9a:bd:2c:e1:1d:29:7d:a6:88:c5:77:f2:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.pavullonelfrignano.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.pavullonelfrignano.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.pavullonelfrignano.org
Other certificates including the domain name pavullonelfrignano.org
(limited to 100 certificates)
pavullonelfrignano.org
pavullonelfrignano.org
www.pavullonelfrignano.org
pavullonelfrignano.org
pavullonelfrignano.org
canyonfloors.co.za
www.pavullonelfrignano.org
pavullonelfrignano.org
www.pavullonelfrignano.org
www.pavullonelfrignano.org
www.fontanafredda.org
pavullonelfrignano.org
pavullonelfrignano.org
thetoken.exchange
pavullonelfrignano.org
www.pavullonelfrignano.org
pavullonelfrignano.org
www.pavullonelfrignano.org
pavullonelfrignano.org
pavullonelfrignano.org
canyonfloors.co.za
www.pavullonelfrignano.org
pavullonelfrignano.org
www.pavullonelfrignano.org
www.pavullonelfrignano.org
www.fontanafredda.org
pavullonelfrignano.org
pavullonelfrignano.org
thetoken.exchange
pavullonelfrignano.org
www.pavullonelfrignano.org
Certificate
The complete raw certificate details for www.pavullonelfrignano.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISA/er0llabQwUqhkzbIKtGiZAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwMTI4MzJaFw0x OTA4MjYwMTI4MzJaMCUxIzAhBgNVBAMTGnd3dy5wYXZ1bGxvbmVsZnJpZ25hbm8u b3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvO/EM08eOVW5oXsL 4ix9itIuHthsxL+7qqpv4ejb4rcyONCELlX4mcHt96we3HwCnp8R84wthp8zuxqg tbjR4QYLt1z/KGoS2VsBpI3lJmhcrjVWJZFzXnt5Y4HCSOuqKS+CZ8Fa4hVwK2UE 7K+xVbTAAy19zfAe7sUahrBaCaJ1XFYoF9FM3m34gIqmUrAdLSJWsI8MPXB25LHn O2Xika1szB2v7nf17rLrXPuhZHJ1aqvRT9WbLEQpT75AlgrXcF7PqlD7owS0/bm8 UNxaZ3r4fgzcmV3V21grTL2idI1vYLSJhyxrzpQeS9LklPcssg4BUET2+m1YW64V cCzFjdeR8icbHNGjRaHmTqsp+KrPphqhxilYDbI9DKf/9Q1BNWelED4JnA9jcakw G7ZD2ecsG3HJ1cSxy/UihrirFCvmSdy/ygC3/KRW53p5uSbcTwkpf/5tZj57n9Ec 0sbkuORejNdJGAPBhWfSl1iwxVKxn8Oy5l225X+HiniyeCqtfOsioG0H8XtipXEr 1NAMOh0sLNsk6Ka/ZHz/tsIQuLUvHR5CMNShp+2GlU+SRSSKs5dL11uwdt2NVSjF 0RMPZaAH6ADN30SAFfMYYsJIt+1S9Cd8BEucQsuToEouaqd0PMK+4VT6LCpv8hA/ 9piVQv4lehLImeFZFgsLM5mbWIsCAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUSBuN0Iy0Acp37kttn0IN/9VRTKowHwYDVR0jBBgwFoAUqEpqYwR9 3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcghp3d3cu cGF2dWxsb25lbGZyaWduYW5vLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDC v/1eQiAIxjc1eeYQe8xWAAABavxEkGcAAAQDAEcwRQIhAN8MILVm5/JEi6WrFpRK dngf9bSTThMop5s7QcQstfDSAiAfV0INXJDYYa9qjKRlsn0ySUzXh/MBB4SgqgzW nbhBHQB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABavxEkIEA AAQDAEgwRgIhAME3qBUqtxB0l1k3PZRdFBGXGRUfmMe/57GMPOnFmDeSAiEAgWbn 2lfETL1SRcpYAYGdf3J+ZQiVk8Y1pV9hW2m8eywwDQYJKoZIhvcNAQELBQADggEB AFI1jF1LScAcBQhqwu4dv0PaBQqSDDXUnfpfg1ohKvp9qVrDAKlLiG0YMX9lxrJU +4SqocfVSnXGdkwaE+6BC7hw7z3qygNvYU7EhFqm74Uos2210r96aHUip7YcN2ES jd2+iNYq7mUmXJusZsNy2/ca54wLFVrqnkrSUpS+uwen7M4yXG15FEMwJZLbnU4c iQEb+mnTbRmVbxaS4cyH4xbCZh2hluOeUmAay6XoMnsh6G+izcFNg7/s2uAWtOCw bHXHmLnd41WB/nAftXu+FNmJ+K6XeR7CO6azTpPlItMXWm1XEnyFVccicGwOfigI 5d6pCNglFmn+/H/ipnPVdqc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvO/EM08eOVW5oXsL4ix9 itIuHthsxL+7qqpv4ejb4rcyONCELlX4mcHt96we3HwCnp8R84wthp8zuxqgtbjR 4QYLt1z/KGoS2VsBpI3lJmhcrjVWJZFzXnt5Y4HCSOuqKS+CZ8Fa4hVwK2UE7K+x VbTAAy19zfAe7sUahrBaCaJ1XFYoF9FM3m34gIqmUrAdLSJWsI8MPXB25LHnO2Xi ka1szB2v7nf17rLrXPuhZHJ1aqvRT9WbLEQpT75AlgrXcF7PqlD7owS0/bm8UNxa Z3r4fgzcmV3V21grTL2idI1vYLSJhyxrzpQeS9LklPcssg4BUET2+m1YW64VcCzF jdeR8icbHNGjRaHmTqsp+KrPphqhxilYDbI9DKf/9Q1BNWelED4JnA9jcakwG7ZD 2ecsG3HJ1cSxy/UihrirFCvmSdy/ygC3/KRW53p5uSbcTwkpf/5tZj57n9Ec0sbk uORejNdJGAPBhWfSl1iwxVKxn8Oy5l225X+HiniyeCqtfOsioG0H8XtipXEr1NAM Oh0sLNsk6Ka/ZHz/tsIQuLUvHR5CMNShp+2GlU+SRSSKs5dL11uwdt2NVSjF0RMP ZaAH6ADN30SAFfMYYsJIt+1S9Cd8BEucQsuToEouaqd0PMK+4VT6LCpv8hA/9piV Qv4lehLImeFZFgsLM5mbWIsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345614992606670791165441681121854021576256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:28:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:28:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pavullonelfrignano.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770794028552459780561516720242574314972097996244771178871744548130540423234426707595427476066255064770997079391743574840171497253626342204479758612633059113138206929856644278745263326693369922391318142669543288856558125628311184404883273226973558339537909677589297147161972380463269345647503194210660556227357990272378157942489001948088564898421300921408987862235835463014518720488247681669617110572327911247814830399841121349898362257848371942015726470949936989307236773938557124099529412167884090689289504466720577624869372111089232429398233098646448184531276929137638606730242964462378611408143238866481483494403126989065380116060652511625356145137215739994812907443372924399608509173492599173299722046900551768996552325831987993800534743942875143238345311611812723438849804726570859650886547745975944371807275923903631599964780683610714313842026108067094627846663133813892983555236815994163306288262838799160083482850663714804996234409995642582003059822996819611812166271103684740054767371561981502747089279056324800405913105007958222523658373828246074822504661883051081701725998015291196387161725055627891292532273602567126107774720212099300360329314783225874660619258548379516795352152703555376864820145587641712090462316877963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 481b8dd08cb401ca77ee4b6d9f420dffd5514caa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pavullonelfrignano.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afc4490670000040300473045022100df0c20b566e7f2448ba5ab16944a76781ff5b4934e1328a79b3b41c42cb5f0d202201f57420d5c90d861af6a8ca465b27d32494cd787f3010784a0aa0cd69db8411d007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afc4490810000040300483046022100c137a8152ab710749759373d945d14119719151f98c7bfe7b18c3ce9c59837920221008166e7da57c44cbd5245ca5801819d7f727e65089593c635a55f615b69bc7b2c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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