www.pit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:9f:a7:18:f7:53:80:c3:c0:cf:ca:68:31:45:a0:9b:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:9f:a7:18:f7:53:80:c3:c0:cf:ca:68:31:45:a0:9b:f4
Serial Number (int): 298980133027862177412250251030346978073588
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:cf:26:70:62:a4:43:88:9f:16:05:ea:fc:a2:76:80:3d:b6:99:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:0c:24:50:9d:b6:d1:b2:eb:3d:fe:55:e5:b3:38:4f:3f:41:f6:f6
Fingerprint (sha256): 7b:72:a5:f5:70:2f:53:94:93:19:51:64:db:f4:b9:e9:c7:c0:a9:19:c9:70:19:4d:37:d8:41:19:2a:a6:05:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pit.org

Other certificates including the domain name pit.org

(limited to 100 certificates)
www.pit.org
pit.org
www.pit.org
www.pit.org
pit.org
pit.org
pit.org
pit.org
assicurafacile.com
www.pit.org
pit.org
www.pit.org
pit.org

Certificate

The complete raw certificate details for www.pit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298980133027862177412250251030346978073588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 19:41:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 19:41:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758743770558758273646925253851936459496926148915453125023683019101790581925455004488887560120713740157763150093447317173676317865402811243258250454591850955672119818702381650242052676367082107335064217596133930933654848547375524879056648839807374353942391458049936624021842733413252116799328012631172505101513691022370229594464556890885527664831230612335818296638231100023645786011636922293391140538393544538421764975405331037864021129461518869538468662745447566809095477012149094835999044485584100840932458898285116367336988894191454869528636204537064292941438108030981119816628111692352344464198493398211030835015791798421918821852107858388343747466711986267883416716267223081913763058858691505705391988628516775829132279910528300962260333887472812516399723793857880001183891949350947808510143254568412928521793720548605866600544560750885353053174358799870753654679169606434823638459691249740220963583230039157477136953060703883507244933799958245906888945298795257673142352228190888624605617001802045794653918592333261977478791766749619930661012232023719388574689598892164084233016006758082488899491398241360798239118984816333197509327496917180560291457963772174541560156976536942544174175121296159893058463546867666168496197032993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6cf267062a443889f1605eafca276803db69974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ca150107e0000040300483046022100d30562f59d0c2c56b86b93333792132b6efc5a6b80ac1171be094f948ad9e832022100c77679711ceaf078bd901c4cddc5d1cce0725e4d45be02f8bc2e08f9ee5431a8007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca150109e0000040300483046022100f0cb9cbb655ffef322efe02e80c9cac9cc48c15e9a90b5b37d4a5ed4beadb8d8022100d48f08fcf4a2ccfc293b4aa5165fdcc253cecd844ef6d5623baa1868e1b7eec4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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