www.songavazzo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:28:74:9a:bc:7c:c6:ee:1d:68:ff:fe:2f:d1:79:ee:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.songavazzo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:28:74:9a:bc:7c:c6:ee:1d:68:ff:fe:2f:d1:79:ee:72
Serial Number (int): 344419529888681301847890980327989733617266
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:55:ae:31:6a:30:0b:03:0d:25:f7:93:0e:d6:2b:cd:b0:f2:59:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:88:4e:5b:ad:21:d3:ec:3a:31:b2:cd:10:62:31:96:19:6c:e4:3a
Fingerprint (sha256): 79:f9:ec:62:82:e0:e3:e9:14:c5:13:19:63:5f:ec:b8:5f:dc:24:d9:6d:63:2f:be:4b:93:d2:50:88:fe:c5:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.songavazzo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.songavazzo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.songavazzo.com

Other certificates including the domain name songavazzo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.songavazzo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISA/QodJq8fMbuHWj//i/Ree5yMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTUyMzE2NDRaFw0y
MDA1MTUyMzE2NDRaMB0xGzAZBgNVBAMTEnd3dy5zb25nYXZhenpvLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMG1s8UN3s63IJkLO67dP6PfDHeV
5GyyHzNaZqjBvJNYBWJC3STtvtx5NzXeQlQ4C5hIT/He+em+v7SFpTpp6H46HDq3
h0gMMsarDBkRhbNzZCIBu3ovLC7ESvmesXklMozHb2znmjzpJs4PiERRQvSjuD1w
+yZYWUczXTjQqZ8o+/Oszohyp00oa7j6ILWTGmNDpoNL1h4Qie0IcjKMPrORt5m6
vSrlGGWe/m73tkllvUCduEFHZ1fUbz9ROJ/7x22gysDQSZFo00veyc5ghACfmfOw
vQTxLAxHn9ZFZTbwN4MFkS/8Onq7ZEFR9L+C4hgK6AhC6vB/gMNBww6UJMRAOCHb
mo9OD8ohpNNoHcHowIClkoIm4EEl2QAmDPQq5uk2SNqXaU7OfialUptLj6qa+oZr
j9gwu4uKx5txJMsQMQL63aKObfpn6RiN1sqJ/2RrBeefJ/RiySpNkpF9/aJPsxdU
mKHIH3zLGS9c7n1mwaU7TcWfVHhKsw40Y2iS/upkDTKFiiHR+e/Tu/d7GYFGVHv1
7qqkQY0UpsZWMi8dEb6bKF2e5xFfwz6mw8b/ODajtinWOxM/fH2busdHhnbBtxMZ
FIn2x4LGoj8qiluDtc/MfxD1zCz5Tt81tPAcqzfLzH0r5npjvWCJ0wbNXGNy+kZO
88lUemqLqYHmK/n/AgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FKJVrjFqMAsDDSX3kw7WK82w8lmyMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNvbmdhdmF6
em8uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW
eQIEAgSB9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFwS1rDNQAABAMASDBGAiEApUXChqDz9CqiAICV4pfSEVP54Y4ZMI4cym6FZ6dS
QdcCIQCX27DzKJP8yIZUQ+XwANSkX+FEQFuYIhPH+Ymg1m/PbQB2ALIeBcyLos2K
IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcEtawyQAAAQDAEcwRQIgTlJfsxEI
MEdvXM8chAB4d54QxT1kCFAtXrbYDy8Eh8ACIQDWOMbE16G+FB3Fjl/U6MFZ8d+j
kR4fvRuwM+zx7Iuj5zANBgkqhkiG9w0BAQsFAAOCAQEANNMSPlvMAL6gC8AzRFrf
mtDu9KHuYR2yzUIgTMA3qVe3b/mhbrOuCTh6P5N0d4aylLymytFPXmg2E7S3ws0g
X+6R/pQZZFJ/oIYsLYdMOpwMPIS3r7eeNM7Noq5asRmEaN7htxPVx+s2Uuszy7nk
HrxpW2j1NtjvgOvRNnT0KMIbHKfAgQ9cweoNWlOZnV0Pvb2tn/ujZb9EwSWnTb+Y
MN2oUKUvKFvz/641f/Mci5ITZ6YtIV5OUg+K6xd4sNATJBO9iLsdgGwe6z5Fnr1T
uYL1IcSllp2yTehL9c1dmmK+nHb1KcO8e8Up/tC8qUCKEjGZ6gQr9aZtLr1aFzFb
Qw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344419529888681301847890980327989733617266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:16:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 23:16:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.songavazzo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790266931716339556710137736221277886531438131244834311798111706224356303563186173001875197274522863804300662608304007089598519650827328702403892859438862041166134450641747610416102740461825280522861930656217369986136584208569785488115354106622201380307435547631445181555445703465411202068330434712602356982203076968097306784661364066101781802130131883622891978286109500266343549071630330511179871107446688234560833915275792537118563911487533871944740072382681270269698669465474311266707445540649681999462770902924340265244064618232810670968562975689352796776042467873538652253655367155343635888303896034275390613678565464017127486042166323540929210323048742923705403052307203535111082996916975058392677266713194437411790369732232128181790375910247639769896662221761652060719206883948829229241229814106218966535821779561862244398241044342378846173234723848716268318318989126672236024175567585770954840079183822086633120903469181759436296108365667611608009452948539987567127634221908916223676107167780416897034169365472041907556963626297408642379900055675046975590835369000508412580791904363363689749473918804434021178456422187649811929180941527939889192348669901470112472995378051922683666979519878276074027834620576479517501956028927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a255ae316a300b030d25f7930ed62bcdb0f259b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songavazzo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704b5ac3350000040300483046022100a545c286a0f3f42aa2008095e297d21153f9e18e19308e1cca6e8567a75241d702210097dbb0f32893fcc8865443e5f000d4a45fe144405b982213c7f989a0d66fcf6d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b5ac324000004030047304502204e525fb3110830476f5ccf1c840078779e10c53d6408502d5eb6d80f2f0487c0022100d638c6c4d7a1be141dc58e5fd4e8c159f1dfa3911e1fbd1bb033ecf1ec8ba3e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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