sanpietroinlama.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:30:27:7a:22:19:a9:fd:c0:4d:6f:9a:e3:bb:19:a0:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanpietroinlama.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:30:27:7a:22:19:a9:fd:c0:4d:6f:9a:e3:bb:19:a0:ab
Serial Number (int): 320950279926975801669143052812140211183787
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:e7:67:23:e3:72:54:6c:63:79:c9:d4:6c:3a:b6:ae:bf:3a:24:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:d1:b9:d7:05:9a:a0:f8:4d:b9:3b:4e:f4:f1:cf:cb:96:99:22:37
Fingerprint (sha256): 79:e0:f1:c5:54:cc:33:8c:ab:b2:fc:ce:e0:55:f5:73:4a:bf:76:f2:26:18:fe:ef:a1:82:65:36:96:1f:fc:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanpietroinlama.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanpietroinlama.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanpietroinlama.org

Other certificates including the domain name sanpietroinlama.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanpietroinlama.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzPJ42RLtO4emm0scSuPC
zbsPprnBQAKUuAJtxE3TiQpiwZIwMHPqILSQEVjL+kwki22D5ECaaDYub0QMfIa4
FSZNbox9x3EtZeYsTGD/qcN5Ksqe9buN29Rp2mTMb8wqdseSkGiRpiwFF9RYSPpP
iiVTVp/7YH3wBTBbZcvvpeTE6An54YrbZRlLEKOVjyRIj3WEqFTBTyMTTZrViqvV
2lNIUsdJIdN46MElcWV2PWkl3iRbW1esNIgOwbTCoNP5zMLrVuEr6WpRtpM9tTae
Xt7R9Sl467dUht+fAc8/cNUaTrzUe/C+sYPcGUOegCOmCkTQ4Pn+MT1RIP33epLy
YVDVRqn1T8CEaFolyYP2CmMozKEUwvago3zEQVfv8DVXm1E8fGMAPVadp6Amaktg
PIakyHt0aWYZfl2bgMgRv5OJprMvAfdF05lju5UkQ0TXJY1Kr7BI7q3MeeK1rX2w
aR7IOEfmBt2G24m6VgXGXSXI73TLWpPp9xobHD5zWTWz/PyeFTGsEQTzC761/+YL
gC7/LjTPdo7gZA4qHH9TwOyeryXUgzLJMEKe0NkVgnp3A19eCsRJmcMLdoDaBTbu
Q5RnuUShyt4Qj9S8qiYOBQjTskeIpmXJPUUFXX5VkzhgN6qV+kmZrFkHjYnS77aV
jK4PLYKqvrDwTIos28csnz0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320950279926975801669143052812140211183787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:51:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:51:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanpietroinlama.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836111451245492681852087127041175744462413247676048240131115738213608218639693630573496916808222412264253789824889599093950689207951221088785539561555249922607963536841992009213240851571277221898875049626064884149112835856816120693492690979704287249612557131306405785935221847629361834371059407492715215495109220237510057878233622006217896454699533399075822122288348914476122977288210987076411168609240426474728594738134091417442149711781470980718392144433329213906751185306372239171557291956947741165774989764905879737030069340190000195103197733347744816772294359183164897703580946686750951833645170480025391076048217635957433488171171025328560519399715071731080279570751726483236297949986592503548218989343208436335740199812177547314768949627904428931808208760204562972502258559362894174014642542302499995995963259627772840518430920326023497464233771036802676768251070671442673280566014634618297988115614615997799756772342090441973171371527911955189672355149611689524327222792065664914786819643825382390896751085499451725494550728021520068663072655667868895203123095289258057353136501475272608785921714722463942970591241077397772909593754351282659995037501264133337448719173296216298085527723621096883281902713106529830690697813821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46e76723e372546c6379c9d46c3ab6aebf3a24c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanpietroinlama.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afe1134df0000040300483046022100ba56a879fc982e1c9fb7871daf73705794e09e6aa1d26c3fe76c629acf2583e5022100eafab157e842df53fb4999049ff70655b052fa9851bbc6699c662ff4211cebf1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afe11363f00000403004830460221009c09a943e1e3b181a2cd59e43acb46bba06ce95c45bfbb58dc2882e7246af4c7022100e1ecbf68c31dd5bcc68d87579c027bd14746f825df8a4bcde62b04e7685fddcf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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