forum.sfgame.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:3b:a2:ea:8b:28:71:53:f8:9f:55:64:63:1a:41:05:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.sfgame.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:3b:a2:ea:8b:28:71:53:f8:9f:55:64:63:1a:41:05:2e
Serial Number (int): 271624599163860364771876867474180427285806
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:3e:3c:0e:01:1d:63:cd:c8:53:7d:58:3b:97:fe:fb:96:52:56:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:d8:cc:f2:8c:e6:8a:42:46:0c:81:75:45:f8:2d:01:82:db:99:2c
Fingerprint (sha256): 78:fc:1a:09:40:56:af:3d:2b:c2:63:40:cf:bf:7f:4e:0e:d8:bd:da:d8:a9:82:f0:56:46:c7:f4:b2:94:c0:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.sfgame.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.sfgame.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.sfgame.it

Other certificates including the domain name sfgame.it

(limited to 100 certificates)
s2.sfgame.it
sni.cloudflaressl.com
s5.sfgame.it
s5.sfgame.it
s6.sfgame.it
sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s4.sfgame.it
forum.sfgame.it
s6.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
s5.sfgame.it
s1.sfgame.it
s4.sfgame.it
forum.sfgame.it
s5.sfgame.it
forum.sfgame.it
s1.sfgame.it
s6.sfgame.it
sni.cloudflaressl.com
s3.sfgame.it
s3.sfgame.it
s4.sfgame.it
s5.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
s1.sfgame.it
sfgame.it
s8.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s5.sfgame.it
s7.sfgame.it
s6.sfgame.it
www.sfgame.it
s3.sfgame.it
s1.sfgame.it
s3.sfgame.it
sni.cloudflaressl.com
www.sfgame.it
s7.sfgame.it
s5.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
forum.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
s2.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
www.sfgame.it
s3.sfgame.it
s8.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s1.sfgame.it
sni.cloudflaressl.com
s1.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
forum.sfgame.it
s3.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s4.sfgame.it
s7.sfgame.it
s1.sfgame.it
sni.cloudflaressl.com
s8.sfgame.it
s2.sfgame.it
s6.sfgame.it
s8.sfgame.it
s2.sfgame.it
s4.sfgame.it
forum.sfgame.it
sni.cloudflaressl.com
s4.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
forum.sfgame.it
www.sfgame.it
s2.sfgame.it
sni.cloudflaressl.com
s1.sfgame.it
s7.sfgame.it

Certificate

The complete raw certificate details for forum.sfgame.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271624599163860364771876867474180427285806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 14:39:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 14:39:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.sfgame.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 941318452842502238394351539103384526410776819373502635461549240448477169647333003454244747550511918445217219097088671016138847470194898515522829308425058960308115989524791329558077933991877071348362251668982724629924323846040219429818391844549237600260699504560702416388089598445068710848621461918031637748585785067597061301274273828982051807264895139137451269567223887620260652639394075903120899406919756595133835110376487485401705179187321677580315690075480912047782939031673845372035088623141520542955216495341284989287892659914896991207659444199936894261928652895684676019244035152447487685860524257359875989151208919049596219490982502550478150526997762948160567662384088898557491742582736641795437154646045183532731650933312803730177541250625523760730318799457899798596601320655370205278659370540664067916456592246475587096100513419693972638594200109150991516667068101656789673159817716001105171310923381807431827597499450966216584606854351047291590715463283605860857018503842928366710779052132052838848815980923629175492987805660645645675458836064115186147172132597188960994433140274018634468265815498187633928037459214166195132939255415580423100344166870808214202963030280492640802541701943830375074386879429980555591779214351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e3e3c0e011d63cdc8537d583b97fefb96525693
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.sfgame.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8dcd1bb000000403004630440220210170efdf709bf989d7bec50202dccccac5a31869dc7b7a701f063193cff91102202e27d7052cd72139a9342c0270498fef6779de6a1f027d57e774c1a91c1f0d8f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8dcd1ba60000040300473045022100eb408b1a8e6580dca0c8af6a6e5ca8e51aa06891a35bf366619049394de6e902022028dc9365e55d225bd974f34959019197948c92b30d8c117f7eb9aa4ee999da7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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