www.cassate.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6e:ce:55:40:f0:02:ed:7b:9b:4e:3d:7c:cb:e3:79:4d:d6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cassate.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6e:ce:55:40:f0:02:ed:7b:9b:4e:3d:7c:cb:e3:79:4d:d6Serial Number (int): 299042181786038518757294714707939725757910
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0b:b7:86:b3:c4:06:36:5d:dd:5b:f6:4f:91:86:c9:3d:ef:9c:91:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 58:69:80:fc:52:14:1c:07:b6:51:75:a2:05:7f:1e:7a:97:e8:5f:00
Fingerprint (sha256): 7c:e8:5d:ca:a7:8f:42:52:f0:b5:1d:df:2f:49:33:6c:50:7b:77:af:ad:5a:3b:c2:2f:8b:7a:92:83:37:48:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cassate.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cassate.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cassate.com
Other certificates including the domain name cassate.com
(limited to 100 certificates)
826.me
cassate.com
www.cassate.com
mondragone.org
cassate.com
cassate.com
www.cassate.com
cassate.com
www.artdiscountstore.com
www.cassate.com
cassate.com
cassate.com
www.cassate.com
leedone.com
www.cassate.com
www.pastificiomaffei.com
www.cassate.com
epiktest.la
cassate.com
diabeteskidneydisease.org
centrisociali.com
cassate.com
cassate.com
www.cassate.com
mondragone.org
cassate.com
cassate.com
www.cassate.com
cassate.com
www.artdiscountstore.com
www.cassate.com
cassate.com
cassate.com
www.cassate.com
leedone.com
www.cassate.com
www.pastificiomaffei.com
www.cassate.com
epiktest.la
cassate.com
diabeteskidneydisease.org
centrisociali.com
cassate.com
Certificate
The complete raw certificate details for www.cassate.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISA27OVUDwAu17m049fMvjeU3WMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjQyMzAyNDNaFw0x OTEwMjIyMzAyNDNaMBoxGDAWBgNVBAMTD3d3dy5jYXNzYXRlLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2qGtTfyrvVXzf55+nzoipQSngoz+id xo1MXgRw7UdTUTgNXli1iVE0jfxE+rS6/DVpQItT+ejdsVBK2J4KkufXLryWPsW9 U9Wzvmwx98k5h0leGOXqk+RrfxU6hC4iupNt3kutYAeQ180z0sKuZQoeMBb2S6wY 1DjKYU1D52LghzY/BxpBAZjU5TdfgakWviqc2GnjtVMzIjQl2yP2YbmqnKOaE8OX QT3mBK7rqJYOdbAWlx3fdc86pdcL8so8ynmf0WEGlE22na19UIuvcpSDLDEXJhBB kOaN+7Ui+tw8rgFVwCAJVYAR/JGMqu9NgVTRPZS/V+9rD6MrFoyBcqXLrCDolrKG l3/5C8f39DBaFAMvBS3p7s2uo7+QNoiydMPdAOE1/lQ/ncEVcevuYyd5r9CQ+ba5 uAWyfuUisWXQkVZmuNTf5CgVSo0+Bbt+JuH5rTdj5KMw9lpXazx2RivnAxI8URsj iO9p693RUf6CWLgigyBj4LGZAj+iTN6cRZrx+RskHXeOWF/I0KwNboXlcrs8yQNf X81HRayVPuuOZmdDGxCahjeGGefyZC+o2tmXSudlg8tM+rBqta0Rk9qLL9Uevbqr uDiFeOrRwZpvXItsNEm5gC2V2j4eSq9XMMhQ4cODeLR6R2vlzuHxWAcMgBY+8Lyz 2HnzYXneSOuhAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAu3 hrPEBjZd3Vv2T5GGyT3vnJG+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmNhc3NhdGUuY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsJm/n FgAABAMARzBFAiEA26wXKD/oOFQBjN6tlf+3VaLyRO5rk5llmccDAbeqABMCIEWn RsWwqkmkD4EILemN6rHhLXQG0n1+Tzi9TRjKDTX2AHUAY/Lbzeg7zCzPC3KEJ1dr M6SNYXePvXWmOLHHaFRL2I0AAAFsJm/nOAAABAMARjBEAiAxEOgv9dcopnmQlZJj W8EoA8pZ5AAvlDSK3aMkrzrKTwIgIv680T3iTDW0N/W0KF2ECjWcFBKGL+fpbG99 lS2CWsQwDQYJKoZIhvcNAQELBQADggEBAG9es1uCdcSqBlAqVyuUm5llhI9+vzUa t7YbkMSH145h2o73woGrv9w+DoGwM+esgNHMB0B3sVJPCc+74bOOSvwEoKIbcb75 rtXzfVHSTgOZWPbs4PXiPuqg5K+R/Q66FUDEpJ8qAHSlJkxhJa6lIyXxa+8mIFgm Fh73b0b+O1pA77MMMHBiWM/ZuBjnsFkCvoo7FZsLS6kYix0e3xZ14NEwnciC0VeW 7Uh1NtO+pG4QzEpzjK+ar065t6EINOunRyI/AbkcQaySeEKKLF+ATTkHWQZ+I7K/ yk2Ko0vphfZxDqEvXi9C17VYDkr6kw6kUq0+ABjj8BkR/9FlIDK4qJ8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAraoa1N/Ku9VfN/nn6fOi KlBKeCjP6J3GjUxeBHDtR1NROA1eWLWJUTSN/ET6tLr8NWlAi1P56N2xUErYngqS 59cuvJY+xb1T1bO+bDH3yTmHSV4Y5eqT5Gt/FTqELiK6k23eS61gB5DXzTPSwq5l Ch4wFvZLrBjUOMphTUPnYuCHNj8HGkEBmNTlN1+BqRa+KpzYaeO1UzMiNCXbI/Zh uaqco5oTw5dBPeYEruuolg51sBaXHd91zzql1wvyyjzKeZ/RYQaUTbadrX1Qi69y lIMsMRcmEEGQ5o37tSL63DyuAVXAIAlVgBH8kYyq702BVNE9lL9X72sPoysWjIFy pcusIOiWsoaXf/kLx/f0MFoUAy8FLenuza6jv5A2iLJ0w90A4TX+VD+dwRVx6+5j J3mv0JD5trm4BbJ+5SKxZdCRVma41N/kKBVKjT4Fu34m4fmtN2PkozD2WldrPHZG K+cDEjxRGyOI72nr3dFR/oJYuCKDIGPgsZkCP6JM3pxFmvH5GyQdd45YX8jQrA1u heVyuzzJA19fzUdFrJU+645mZ0MbEJqGN4YZ5/JkL6ja2ZdK52WDy0z6sGq1rRGT 2osv1R69uqu4OIV46tHBmm9ci2w0SbmALZXaPh5Kr1cwyFDhw4N4tHpHa+XO4fFY BwyAFj7wvLPYefNhed5I66ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299042181786038518757294714707939725757910 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 23:02:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 23:02:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cassate.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708489232681245268211972299959909502758496306512646125282516939037442116993811748296644496075466160169659090296001000639999526865303011296425964124750123711420962400151770988087996066184505390527604797805822159603268317681635933746424243904271602035072122684136233187848230795889175020932130211230863481907596488448539229380553335904940080686790575865998944822394354180554912931914887519816481748581255965239691752806118550530308238538122167680608329378455976498799183914276606082560548700597346040621994524071111389411104690645441936992297971747701326332678105341066740649983697199258857732093993903622603902853325600669641788766585749380868674788984142586922477577663540509798104393308312722952054390435817532118820416206608385798654318717347633864975750120557202566986457450472818064746566796953280333942326291398157429746303689238470712081567870260259533272645727294797661394163172695803952003603277885529724918913274413646758558876245510039113811519176993612365315290935370525317069497410962492901072796891454289599523715315504099102649087042883899083071849397407586352211107379981761716153098409723687493271763732811703519249921638380723226004638570440581356374171205260193087820429722110936654873763179576209079357294728768417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0bb786b3c406365ddd5bf64f9186c93def9c91be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cassate.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c266fe7160000040300473045022100dbac17283fe83854018cdead95ffb755a2f244ee6b93996599c70301b7aa0013022045a746c5b0aa49a40f81082de98deab1e12d7406d27d7e4f38bd4d18ca0d35f600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c266fe738000004030046304402203110e82ff5d728a679909592635bc12803ca59e4002f94348adda324af3aca4f022022febcd13de24c35b437f5b4285d840a359c1412862fe7e96c6f7d952d825ac4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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