castelbolognese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:9a:f4:47:df:89:d5:de:b1:a9:cd:de:3c:63:1c:a5:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelbolognese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:9a:f4:47:df:89:d5:de:b1:a9:cd:de:3c:63:1c:a5:1a
Serial Number (int): 319050547294465319906687873044220372362522
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:17:25:47:93:40:ec:1f:50:7f:55:09:7b:ab:ac:bf:7e:9f:69:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:fa:c8:55:3e:21:2a:92:cb:d0:6c:29:9b:69:c2:92:70:71:e1:8c
Fingerprint (sha256): 71:84:47:0b:3a:45:33:e5:de:7f:c1:79:99:cd:74:8c:3f:52:c5:75:7b:7d:46:f9:48:e2:f4:96:fc:d0:d0:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelbolognese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelbolognese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelbolognese.com

Other certificates including the domain name castelbolognese.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelbolognese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs1oTy/2drgUcmLq/B24Q
X3XGWfqVYEPoIIqTIlmgi4vCtBruVdcIB9n7fG4VtdzWZmrllfn7XjlIhRYGq3Lj
77b7UGKayumrCd0JI3nAkXtYClv52ortygayapJQPo30l1wTtdqTdeIS0LY5FYA2
YLB+xnEMUkhwntnqi3SsvE/WOTLA8UfOYdTVHMF6IC8pPSkP91dBZsTBJ8a/lmHp
QURqImXd5VL5NZIYUKU2EbqgWP0GpzgMHHuL4K5D47YJONVdIhwPshsbY+s8Yzrp
4dC0lh6FojYoSgneoHwrlkFUjeDnRxfP1CDI+IKeOgWP32BF/sYEIi2ii3Y6Mxpk
y9LQUIQy6czRZZDHCIrGTtXwBGskBAi/d5pKnefDqvJW2HOvxoLt0z4ip85KagJd
9g9NEk/nEIwpsrPTDOwWUTh/66aBHXzEtgQftsVWRXuKfUsY4mRSxCv61tlat80B
tCDKaJD7aFvkI/3F3bw9odBn468KgnYCstidAAs9PKd/Bz2Hk+1I/rXuRGyyZ7F0
KQB8H5en4ve2PwJBnfLpPb0a+tQotnPghGlcSSrSnCMEcGNcUOtaUsmqFtl3QOfW
5LFmgU8MJI/Fi6ABOejElp7C6GZYZETQZCz8UAAPLlTAJZCVRGXqnJp4qrj1DZRt
gbXBzTzSsfoict4g7NPFNAcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319050547294465319906687873044220372362522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 21:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 21:42:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelbolognese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731691770404948948814283156705017619827781923512567919224411575719789330473930496802286185013225900719925774995048220014433450463624264933917303748842871379530776492105362271998287697097532927416399266873775873431111181756880207382067568359053623583234753326498526835738135680402336704254442262989271607775208066016159951775206762206291655811960107240585361951287348978960451967838159256365383611768556950633714850402461699733266541683372400494090551252616932509161924339398897270864101787953473328043051953019182181254882718212916751449073850697864574662139384872054564056788767457302075468020735108200619263608487128133868428466989617642218966052072386149185414446976674347167816395102789685071779824992357909983843716808486097251455107332352492494196856032364800667902294361196003483250063939929577814225717799332775337808045054677432253178443677788355639219587821776140259713857568418831035569784548922582587008985993169504167713137920052594205448922459277723206247363582589326140693182512108228286585203485705001956342848468360157726308997384213140666119046920704679897196515268758720928132299507358722639102687263332090483083228341122880957628924636292664939151852009188339996355078665299338780879675373093917267259697117082631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d1725479340ec1f507f55097babacbf7e9f69bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afb7560680000040300473045022100d60dad8679cca27a1bbb8270cc1b3db904351a6e05c738683c5949e1663d3be802206d107c9793fa43ab3abe25a219cc8449e1569dcf57b4d2d1c710bcc72d687a67007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afb7560880000040300473045022100c1735080a400873f0afb6ed8213103e7c81d33830c25a6ee40117a2d47ea961d0220652109324ac533b05b064735f46d1078e999127046717bad40c4dc82fae1c221
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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