www.correzzola.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a3:c0:d3:d0:5c:82:25:38:1b:8b:96:86:e6:35:a6:63:b3 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.correzzola.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a3:c0:d3:d0:5c:82:25:38:1b:8b:96:86:e6:35:a6:63:b3Serial Number (int): 317059195179292030737981421754954862191539
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:5b:be:c3:7b:ff:3a:5e:75:df:20:2a:80:45:c4:b6:2a:f3:3f:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 94:8e:29:61:c8:d5:a2:ef:6d:21:f5:c0:14:d6:03:a0:bd:7f:4c:ad
Fingerprint (sha256): 7d:6d:a5:da:ba:68:58:f2:9f:2e:7e:8d:94:87:33:3b:71:bb:e3:da:18:ae:99:28:8b:25:72:a7:8b:35:3a:b7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.correzzola.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.correzzola.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.correzzola.net
Other certificates including the domain name correzzola.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.correzzola.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA6PA09BcgiU4G4uWhuY1pmOzMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjcxMzAwMzNaFw0x OTEyMjYxMzAwMzNaMB0xGzAZBgNVBAMTEnd3dy5jb3JyZXp6b2xhLm5ldDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALZTFQA2/boZ6cXa7Fa1xC7vqnSl BOMHdu9+E+Z8EGXIVqJi8FfqkKGRvrmFmRZ6qDbWm+cuTRdgTSoLL3rFzxW04f01 Qsy7eccg/YLPns8FNZDBdN9VslXbQ+tIoLopB3F5pHNhX0PlwkQ3VfZVdMhFzN3i EIJhBQXNBqD74bAHrlt+/6IEtR4+nwF2V99h+H2wGPKA80hdtG7njxSthThdYwXV O+yfqBIRamlDahqo+2e+TQUDT7aEQRKLzjQdgIkWRAiXoTQKV3r8qzD9ewuml5q2 6Kt/OVqF130hz2mr9Hjge7qVG0c/v+/IoP4RVXOTzB5ZAXPJYOyJWyR6S1GCRLna 0TN1GfA04eg7J7TFyRZPbhaYc63pOsCwX0SmLWEMJ2GUfN/T8pAOIyKJUTcl4beF TAX2KtevGqjbWntWT1ckAmk6rCNTWmAbJuAVjK9yw/ullUGS61/91zMLZ+Ye3Ao5 ZFsi62Uofe+YpGDwhTFjttJF6SVH+3+R8AP1DSF6+OOOAAHG2jN2Curg8CEtZkHm 8xLsOsrUJpC+0wTW/7a349pUJvReuMHUNyjVdFQ0/lrJrIpk+Dv3AI2skn447qNf 29zSSkaAeYkgBWtCreDulY9r9lgzm3qorQSw+3YTZZaCkwFOgT0ZHm9r4kZEN2bT IyTV9ODM2usd6yYNAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FCpbvsN7/zpedd8gKoBFxLYq8z+7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LmNvcnJlenpv bGEubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A AAFtcwX3CgAABAMARjBEAiAzhZZvmE8a6TPPe/2mQ4K6RFM0O7OdD1boDb/GMyAe uwIgC+lJZyMO0/0f2d4m40jmlkzJN8jvPALtRgYBUDE7f3sAdwBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW1zBfhgAAAEAwBIMEYCIQCfORbRiAUM +LPKTr0a1J/pmNyMZRM1Cbeijatu0lnCQgIhAIxsjvL82hBXm0ZLZiPF76+QEcPw lFKVRGCnPRaSL6SpMA0GCSqGSIb3DQEBCwUAA4IBAQCMI1UTYbl1bHOrtovESjtL oF9LSddY/Qn/y1BK6zSh/ChnbX2ktKPh8d4G9DHPi5mWP6cusZ52agV6Ps6IiaJ5 bBLd4jbdN6QsykHGwPfitr0otpVij4mVvzWQ0L+NMZsUJ/drHJmxlownOWYu9SU8 ttYkZ9sgj7iJPlorLnDUXQg5IQd/nbMmqktSBzP5qxTOBUD1snoPTcRQyNczNjQ/ e2ULYDAS5K5ROl6mOjjLQihQzlpo1/LOTeBmJcfp/8pMtVVDdZRj0t8j35jc1u04 T+ZrWyAVtF1NEShZRqDfBMPApblEMvgW+YNR9n9WBqx3SZJfc0gbUOBtOrkk13mR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtlMVADb9uhnpxdrsVrXE Lu+qdKUE4wd2734T5nwQZchWomLwV+qQoZG+uYWZFnqoNtab5y5NF2BNKgsvesXP FbTh/TVCzLt5xyD9gs+ezwU1kMF031WyVdtD60iguikHcXmkc2FfQ+XCRDdV9lV0 yEXM3eIQgmEFBc0GoPvhsAeuW37/ogS1Hj6fAXZX32H4fbAY8oDzSF20buePFK2F OF1jBdU77J+oEhFqaUNqGqj7Z75NBQNPtoRBEovONB2AiRZECJehNApXevyrMP17 C6aXmrboq385WoXXfSHPaav0eOB7upUbRz+/78ig/hFVc5PMHlkBc8lg7IlbJHpL UYJEudrRM3UZ8DTh6DsntMXJFk9uFphzrek6wLBfRKYtYQwnYZR839PykA4jIolR NyXht4VMBfYq168aqNtae1ZPVyQCaTqsI1NaYBsm4BWMr3LD+6WVQZLrX/3XMwtn 5h7cCjlkWyLrZSh975ikYPCFMWO20kXpJUf7f5HwA/UNIXr4444AAcbaM3YK6uDw IS1mQebzEuw6ytQmkL7TBNb/trfj2lQm9F64wdQ3KNV0VDT+WsmsimT4O/cAjayS fjjuo1/b3NJKRoB5iSAFa0Kt4O6Vj2v2WDObeqitBLD7dhNlloKTAU6BPRkeb2vi RkQ3ZtMjJNX04Mza6x3rJg0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317059195179292030737981421754954862191539 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 13:00:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 13:00:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.correzzola.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743819224791069679293379230317920219411839409944034408725695284850290592962674349608085828875978371280871057551315019416789449275597621317912303154388961476127502750770910943160675373723428459445443971275399442010518677756326029444055015884217889326548625034736084330140388580241994196698799611081622690570670870538060900067138878610574728831176839999471685690773914980357879216587188011922844231372935724990818077010215502280396579020278292447401571029552525319828996052506880799720315091456729631041902089785131890099885769540938234509647308738712579329049073058366540748046226637332847849085875930061455696619570163130779523111554082179645950946262040752772597629480170957094527589681989068752802271860194585013684326995536807025448798248085845770692029835394001495330562834341417253162940914105395442521179419080999494055682267144686313553819653521961163689506521007780124837789144245443828185873162888115714445251419638666738442434392257060595425557235294195702058615921966783265023627399044625303559347522729291989429121347047556059145113934188491962010302094544690825309355030968707378209171434433680190079471704850260364079775874631082240778205877878748095808569091036931734339056317130453857101594101677612848866824513332749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a5bbec37bff3a5e75df202a8045c4b62af33fbb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correzzola.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7305f70a000004030046304402203385966f984f1ae933cf7bfda64382ba4453343bb39d0f56e80dbfc633201ebb02200be94967230ed3fd1fd9de26e348e6964cc937c8ef3c02ed46060150313b7f7b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7305f86000000403004830460221009f3916d188050cf8b3ca4ebd1ad49fe998dc8c65133509b7a28dab6ed259c2420221008c6c8ef2fcda10579b464b6623c5efaf9011c3f09452954460a73d16922fa4a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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