soglianocavour.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:7e:b1:f8:21:9b:0d:ef:72:e1:de:c2:d0:cf:a7:b8:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=soglianocavour.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:7e:b1:f8:21:9b:0d:ef:72:e1:de:c2:d0:cf:a7:b8:c8
Serial Number (int): 288387571578747836709862167728043703384264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:98:b2:16:8e:b8:fe:86:55:ff:15:9d:45:56:49:ec:d5:11:dc:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:87:d9:ae:06:4a:ca:47:41:6e:56:01:8e:07:79:d2:54:76:cf:8a
Fingerprint (sha256): 75:34:35:8a:b2:cf:43:38:d8:ec:8b:ee:02:09:74:ec:64:4b:34:d6:b0:38:0b:a1:f5:ca:5d:4b:08:0a:8f:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate soglianocavour.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soglianocavour.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soglianocavour.org

Other certificates including the domain name soglianocavour.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for soglianocavour.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288387571578747836709862167728043703384264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:50:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:50:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soglianocavour.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661979200417516461268263710381732062557850779920527607778221841964028945906704593110372136006095796354052410871325197520147038464970603392153481315472531729841084166474053269443328357128035289027265957910295294967396068819506821488933642113465942745548216046346192749357421364169200928959272009639467351936502275307960556167461762345367107916290719221537178121405367547892629120867196951911482941520657486950085304811028739729960153823091964125965718529752118183639436629680322209387112626223491784607017844354278232853948289053144763991488076608367937807223917297418578451377344485427529500305647721249506521167100186228962280625733586232293502561465808407443937328118311031691685245592829181909651412025847135919401305266757688195778946487582404881661448722636687503441158897224983862363416106350125254569067623928339914404567311409187673192334513213278710507671685205325740129684848880119379956562000889524123225145168289001081381003503943676489008166727593937852364675900661894547126799030907752124387825069786891204617253666435083158280709830979620157510127651818088032464778603274930423977909417350096638383848701813872175076773618225883193807698713806716785177417480200843184701366832372649110004544951183335314550594217057383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8298b2168eb8fe8655ff159d455649ecd511dc66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soglianocavour.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afe1079360000040300463044022003483c5ee3d2519c0fde1cb6942dd01723d07c4a03c2205f628f8b8493b4020d022072987d8a1c6f8d334b8b2668a8c7e9088d96b491ecb56c361061772b1463756100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe1078cf0000040300463044022013b0e67be3b68b30098bf0202e9e0443f3ceeeea0eaa4df12c2138619e6df5ee0220496052779ee1232ac0487e93e432db74c445e36e23b7edffd5e42dd5baa10d5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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