www.castelguelfodibologna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:29:b7:8b:9b:87:7c:4b:2b:c1:0e:98:5c:2c:e2:f2:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.castelguelfodibologna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:29:b7:8b:9b:87:7c:4b:2b:c1:0e:98:5c:2c:e2:f2:46
Serial Number (int): 312774946570071972182491623888271031071302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:b2:0e:29:a2:78:9e:11:14:0d:ae:c4:cd:c9:a6:75:0a:ef:e9:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:e2:03:d9:5e:fb:d1:a1:f5:38:25:26:e1:73:45:8e:16:f3:22:69
Fingerprint (sha256): 70:e7:58:8d:c9:1a:f9:44:11:29:23:7b:48:82:52:fc:89:e7:44:d2:7c:70:54:a3:c9:80:5a:20:d0:59:25:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.castelguelfodibologna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.castelguelfodibologna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.castelguelfodibologna.org

Other certificates including the domain name castelguelfodibologna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.castelguelfodibologna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312774946570071972182491623888271031071302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 02:57:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 02:57:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castelguelfodibologna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768468500444213774635811224861619377723076124081899627560234059752509472979708138200139990922663465059443701492303291223792124239630457011224341062064063193792895676114438692200527615384211196268573705962434117216941288192890384318931400299498755418898004952298887029002901656140046356056094759253135554060544396499624484978485733738393694667006110524071289871996190865641884363930544148826078720528140485238406141947763883816603863103149138291435413708999907446862464042051535288470513417224389767194243217469215883901174235098144110776446492688077297346739531447053363263014981994621894179347244472665833124388545024953788661163508725958650359415929456254257275991920113736436859749809553197163909950587165271513589148872605595830775836998238382949052104922730268462510418662150871186507047019582310295778587827726752404878188015848360432480653412966922236481218882161912196449320666595841366372904923622329249648189539389867656020348826369383559745152303653036886901722785127713066926822906846551287606953507021533620895387794340115160768587678665216134982613753803835693976651355923001915404151673033669366626649002267962312741462014900926739717062038361751181234560064870036257190971831103360902863790997245549543735612814459531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21b20e29a2789e11140daec4cdc9a6750aefe924
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castelguelfodibologna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aed22a6300000040300473045022100df4830b908b632088e41dadb8a167f8f7ea4f9a8b17664b48a4611acf2cc02920220148f5c8ad8e51c57b8b0c6f69f0da9465670c326b34181f03cee7de722373548007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aed22a6340000040300473045022100c0d966fc1d33a764d26c158c6c59bc7c3c7937385cf51b95039ce1b7db099efa02205a5106eb3f8fa86776bd5616d3094ec8587a7d481cf40b99edc3056a5dba4952
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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