strascinato.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:36:3b:31:5a:60:ba:9a:b2:b0:2a:7c:bd:19:32:42:a7:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=strascinato.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:36:3b:31:5a:60:ba:9a:b2:b0:2a:7c:bd:19:32:42:a7:49
Serial Number (int): 366903072248149561016826577259763702343497
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:cf:6e:1a:28:49:03:39:be:b1:8f:7b:bb:4b:cf:9d:45:6b:23:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:bc:c6:d6:16:b8:2f:27:d9:5d:9b:46:52:ff:e9:b8:e8:8f:6b:6c
Fingerprint (sha256): 7b:e7:e6:e9:3b:3f:e5:86:0a:4f:18:95:9d:c1:b7:0c:3f:0f:94:c6:c0:13:82:60:f7:eb:6b:15:a9:c4:a3:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate strascinato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strascinato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

strascinato.com

Other certificates including the domain name strascinato.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for strascinato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArJzC3AVHhij7V0ewoihA
TynHC8DGS75nzPaLu0byQIs7gVsOaMKFQQDhhRjgPXmr4BopnDXkGI8vavofKFgU
k6xowrzapi82aJeQHIQk0/WSDqvzVZeeKuTLrD3/K0H+Oy/MqES7DGMVTTm2ifRd
Lep16kqOfJk681XEMZr/TzKinNvI9e0Xq/YwcryBZT4TXPrmfrTx0JjTlt3YCfvm
JN209S1WLLcrxbFGmZonMpgKoqj73yZoaxrgV4CZFWZp81z8FnbRCUD7Iow7YEL+
YAOMidpyt68YzBB6FQJOXh0Cy/L4aYTdC0QmCNjcaD9+evXhxVQsQudRV98SxBBF
neoapHWIsgvPyqA4bbtk54XE6TZjFoU3+tjyVlR52Sav0g/3MnavJg8SqsZyFqsa
QdoDT/crAOQQ9hI351HJ5zprhi5SU/MFJNVUUiMdQriUIMjD4rRn+6dQ0orloqgY
1+YtBcAjo4cAckxIB9SlvpNPfZba14wUIFa5QAZH0S2OQJB0DHAi+OboczBYoty9
+pahQGoH4539NGJVepGYyauzBdwMZZbZ+ka90T074dkpyKErrX00MDbp3X1xQDPj
kiEOjIJAhV2OB8d6Kq2+koCTFu2TnuSp1AZhS8sMWU516BOP4Nb80brtRQSkYXxE
5pKL5+rL5wcgcEEuBYbd158CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366903072248149561016826577259763702343497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 13:15:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 13:15:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strascinato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704196942887975222288349808577391256008981202854756469590451124055224690122407310069013023940158068825740087109047217450447290419308751290945040143713876373264623051329464497726516804472194832131057691715199828733211727229267088810461679690001607090472107575247257991031871282534160421741862852030962247156942220217991302384925646795284739032763995376738531140450397659231573205127403376795101766480223007955228864515045137698782315252347497041750150380302538768048209058107551129187229639050649392985719508747376614684000224650949218838641108422833472376474103881313068996229347383340100790279042441539331567316710087435152938583482450187013344261803959757493947835337304141621088788946038734891494850839286784285062993128675658584664783611579582628319525345851058026780311856476537381733896536844324890204363741828113981970482306751460079585327885253641173030349649373511152899305352398092262586579639190867707843174433996564252315382667541387478715484392813997118233064097800573087625739701295937976885990120221875989510268453536123486520318060082347844880770217056649603545422739812854504341024828440503814129959262204047973021099719965264600758229069737718526761019122136218750108533362723270821495310981612337100509378611369887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62cf6e1a28490339beb18f7bbb4bcf9d456b23a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strascinato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec6f7a38e0000040300473045022100d5ff3692a3892341f7301479c0b93c65bf537b776861e2acb620c1c241763c0402203ea95dbe72ae745d8515e09965725d0a5aee04633af43cbc817d350e561fffc100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec6f7a3ad000004030048304602210095b31ae09393552a4d9420642b096a7d405a7c89d3aa8daf9cc2146732d44af5022100a140f3348037791dc2a9d738a59176eaad2d81130813deed105cb425087e4f37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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