castelguelfodibologna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:3a:4b:d8:ea:a0:af:43:d4:e3:41:56:c4:99:3f:5a:8d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelguelfodibologna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:3a:4b:d8:ea:a0:af:43:d4:e3:41:56:c4:99:3f:5a:8d
Serial Number (int): 336276467563496711035528826640920179858061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:64:12:9b:56:64:d2:38:c6:0a:16:b1:c5:27:03:65:77:cd:3b:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:7b:c7:0a:56:20:b7:e3:19:5e:c0:87:50:78:f6:c2:72:c3:3b:87
Fingerprint (sha256): 72:92:bc:44:e4:c0:eb:5b:05:3b:13:11:b3:f2:c1:a6:cb:36:f9:25:a7:4f:94:2b:ce:cf:5a:75:9d:20:0a:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelguelfodibologna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelguelfodibologna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelguelfodibologna.org

Other certificates including the domain name castelguelfodibologna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelguelfodibologna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISA9w6S9jqoK9D1ONBVsSZP1qNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjkxMjIyMjJaFw0y
MDA2MjcxMjIyMjJaMCQxIjAgBgNVBAMTGWNhc3RlbGd1ZWxmb2RpYm9sb2duYS5v
cmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDFNBzhBKqwvtV6jLlX
GN7I6EHrdkE2xSAkrFO8CpGtJ+c21M/P0W8AN4Hh3NZOBSZSKPgr/bxKYUETtMr6
psNreZhEZvV67aYvam7PryK4DeRPaSeotXdLDpfWZTMlK7siEoUPtK/DAKRrMyEH
zeoTVj0biXlU3OSnQScDrq9l5wGnRaNUoB76jez2My4r3RZctCkIQBcsRs+McrLH
WhsEWdsMMOeup9DxO9aLWJp0ToevkEbzV3tJ39JLS8FYXB2h5cb5GMjRb3T/Vg20
OJpKPBwPUdy2VVfT4AqcHWbGWtwNJrnnL4sfvgFz3Rhh99Nl6HdH3N7lPOQOnIwS
YClW4LwqGB9SUfBCMWzurDb80uY0rUhi6KDVGiiPQUEnpgcEbilrxaYKzv68s2bo
ca0+hG6SlmMr/e9dv87nLbsFEQb1ndtd2Q7bWpkpUWd+NE8lApVoMbsgAQaCO5GF
5FMWfVlXAuoFINJinPKskQfArgFOxpIzjTZWUZCydlcb0qoOQrsWDtJpDf+xkbPQ
gCrEDFTmk2Kec89xzeRRtkWP9HV2v3dZQ7OqZ90jeKiN7GnEWqw0r2cTj43NrB6T
k+zj97f9BEO6iLIjDw/09e2cx3GZ04uhaSAh827LqNlOv9dPnvb5obc5lJ4tnLN9
BTTcvPbaZkyTZE72RMXZxNu3AQIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQjZBKbVmTSOMYKFrHFJwNld807RjAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGWNhc3Rl
bGd1ZWxmb2RpYm9sb2duYS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAXEmdSAjAAAEAwBHMEUCIQDmspWWPxkSVikd/oaaME1f
9ra0bwnGEEa8d8gg9yhBoAIgLj+fmsPznwX6hnmuIr9ij/HOG0hAgHVNdxplICL2
iXYAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXEmdSAkAAAE
AwBHMEUCIGTRZM0M3IbCigY/0D5EiV9Zv3xetPSSPgYoBk2ar2ymAiEA8g6gQFkw
LFAeWlMLf3Cw1jvpfPn6fphI7AQZ72+ybgkwDQYJKoZIhvcNAQELBQADggEBAEq3
Iq8bV+QKcuXyWWFWoFZLI4hCj/LY1KKtXytD6WRokMFy+iH3CizlJv4O9XS3og08
CTdfB/elUu/+KXI1dYwl6XSsqpNDAFuB5o78OhktiIAqZE2KfTAYHSuliVoCpkgW
yMwo/pmWz9Wac4KyANB5QuAVpdTKUo1AH9p0ucmI1yF+N6ZwMkDA7WSGAgaz9FWE
oe6iXkkux6PLblWsWi7Qxo+8jgSk8ohYt/YjxDOtViL5rmNlZ76h7G+cPgfgM3C9
GOER+tNomlBD12QXZa90i0jf+thIqJuAIUv7/s26s2DUctukx11msdE5HLDaS7RK
08bKh8T8a0YY3dUi9DE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336276467563496711035528826640920179858061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 12:22:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-27 12:22:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelguelfodibologna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804520356829996835973830857888073379332700030180817019539804383872162606423768954193796224534931614461375441345508363788157771838486818262116668714510903043076155407596362857380529850445112904479529282061636108761319017647181097716993041097394250179767320826123253617413571050141993767098313618520472478315836689451296784240122532790926807783058827506937660074107875340192248453893015165287117759824371920394101820143645100534543323280779559209567158971914896834062740745322087374381740845288984869255268553893278422346449017976629346436374217095267811349436673152590015914784407758906232475403267883225421304922586903117447703026311500436176292218170822188719317819396293816951220514577419884265447943637066713273027531918991484871901109827158954730158299723326289427609515779003700932344848597832625908983080549739935597938242461882581456629289734412816545010394332208993677807801617116313728527043598526420071095263217191882944991815001015880219346942164217085638057185987126802634690386058237689237486879100257262591159094437118350123016323422441086366904250738061602721905113481685264235933106257916554189284918967456186686356292406910057561148137305874115709815393947044681468594643026839284339949307322858254317516562286491393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2364129b5664d238c60a16b1c527036577cd3b46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelguelfodibologna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171267520230000040300473045022100e6b295963f191256291dfe869a304d5ff6b6b46f09c61046bc77c820f72841a002202e3f9f9ac3f39f05fa8679ae22bf628ff1ce1b484080754d771a652022f6897600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171267520240000040300473045022064d164cd0cdc86c28a063fd03e44895f59bf7c5eb4f4923e0628064d9aaf6ca6022100f20ea04059302c501e5a530b7f70b0d63be97cf9fa7e9848ec0419ef6fb26e09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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