massalengo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:c1:24:e6:0f:d4:e1:64:4f:40:33:41:7f:02:92:6f:38 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=massalengo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:c1:24:e6:0f:d4:e1:64:4f:40:33:41:7f:02:92:6f:38
Serial Number (int): 346323899750676327941205305818558722371384
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:00:b1:9d:1c:80:1b:0f:93:80:b5:f9:87:47:10:8c:c9:c1:48:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:de:31:06:ae:2b:4f:f5:d3:48:11:a1:87:5f:ab:02:3e:a3:cc:64
Fingerprint (sha256): 78:36:84:85:ac:bc:5b:53:4e:3f:e2:6a:5f:2d:de:3e:bd:35:84:90:6f:d1:62:f8:c6:94:fd:91:5e:7d:66:98

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate massalengo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for massalengo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

massalengo.com

Other certificates including the domain name massalengo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for massalengo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346323899750676327941205305818558722371384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 02:10:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 02:10:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'massalengo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815000556986638513155090322601032487094650235475000283148176166306928824680255089522391138822208942914753851358396609343805428458610850756207677521528416453317401140796649280100658833435344490249850263425479478927931607075957614430760185844637376502430194827308293858442008498201901844557518643975878741239887515418806762379526983847204923651970316107820555814891666815769926311622267884954609116760057209512817939636196370560703597575147837368469531574129652429514861802942630931013285788815329244789277578280584276438546895987583243353056302919307395759374622577634826844660565510725170227854450671803972203771734740382527686589247093724170326372384125157903005269478912494929561619398650616667591714917285977532629137368076656438828962280423687687056855401213524358876842347205972686607326895990787881166807407804627919026032391575839156021667441081416483426301361695959191187098343934980625721279726123604903751729117766084271233783064047838464407339032300024690915580716012500412268566013874508122415507992053792837449110868085097162071545635050631881038668370799406307122179810227386591462422886679986206494237125299178076392944778722211380858305253086800612207962130064443450555466551841616877973270671979167433994490417291979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c00b19d1c801b0f9380b5f98747108cc9c14864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massalengo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170564650cd000004030046304402200558e71d76480d9affc4659eb5857b9c51a32b3f6f2c64baf1b477c3f5ffb57302202fa5886e1b6fc567845bee40c41f6990d8af5df1cb8d2cdcbde23bfe71a9a345007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170564650c10000040300483046022100d8b16388eb061e925c1052c0b224a1bb4b9271ea1a6a5a68e2ad92041c5aca54022100f679f20898d47f74cc27e22597fe087fbd561ef0f316e9b46557b7cfa3fff4cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055659ca49b481ad38c9d87b8b121f64f54c1ea6a60826e997846faf068b516de8fee1b25901b4a8aecc18cf821c38a3b30d509856bf9994aa71f42ff1b16685e8d8359e4fa19b1810668dd4e56e039bc97fac23082bbb74ec81341c7d86e13542cb06e1235ea5e7cf9bf3c5f42cfc678b514a9b6303fce386ace139d59e023470e75185da48fb579bb2e418fa50adbc16cf0d1bd43a283e521db52702a6b4221999e23fed55700831386180ccc063c5a835fe32c4ae45e221377d740bbf17d2c8bf920be14f1a94a321974eb99638409cf9ba818770e7c10ee3e7daf6601e481a63ca1d196078e27233cf674caf64c60667c2c6844d7cc146f30f24b62e76c2b