www.correzzola.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:c0:d3:d0:5c:82:25:38:1b:8b:96:86:e6:35:a6:63:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.correzzola.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:c0:d3:d0:5c:82:25:38:1b:8b:96:86:e6:35:a6:63:b3
Serial Number (int): 317059195179292030737981421754954862191539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:5b:be:c3:7b:ff:3a:5e:75:df:20:2a:80:45:c4:b6:2a:f3:3f:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:8e:29:61:c8:d5:a2:ef:6d:21:f5:c0:14:d6:03:a0:bd:7f:4c:ad
Fingerprint (sha256): 7d:6d:a5:da:ba:68:58:f2:9f:2e:7e:8d:94:87:33:3b:71:bb:e3:da:18:ae:99:28:8b:25:72:a7:8b:35:3a:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.correzzola.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.correzzola.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.correzzola.net

Other certificates including the domain name correzzola.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.correzzola.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA6PA09BcgiU4G4uWhuY1pmOzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjcxMzAwMzNaFw0x
OTEyMjYxMzAwMzNaMB0xGzAZBgNVBAMTEnd3dy5jb3JyZXp6b2xhLm5ldDCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALZTFQA2/boZ6cXa7Fa1xC7vqnSl
BOMHdu9+E+Z8EGXIVqJi8FfqkKGRvrmFmRZ6qDbWm+cuTRdgTSoLL3rFzxW04f01
Qsy7eccg/YLPns8FNZDBdN9VslXbQ+tIoLopB3F5pHNhX0PlwkQ3VfZVdMhFzN3i
EIJhBQXNBqD74bAHrlt+/6IEtR4+nwF2V99h+H2wGPKA80hdtG7njxSthThdYwXV
O+yfqBIRamlDahqo+2e+TQUDT7aEQRKLzjQdgIkWRAiXoTQKV3r8qzD9ewuml5q2
6Kt/OVqF130hz2mr9Hjge7qVG0c/v+/IoP4RVXOTzB5ZAXPJYOyJWyR6S1GCRLna
0TN1GfA04eg7J7TFyRZPbhaYc63pOsCwX0SmLWEMJ2GUfN/T8pAOIyKJUTcl4beF
TAX2KtevGqjbWntWT1ckAmk6rCNTWmAbJuAVjK9yw/ullUGS61/91zMLZ+Ye3Ao5
ZFsi62Uofe+YpGDwhTFjttJF6SVH+3+R8AP1DSF6+OOOAAHG2jN2Curg8CEtZkHm
8xLsOsrUJpC+0wTW/7a349pUJvReuMHUNyjVdFQ0/lrJrIpk+Dv3AI2skn447qNf
29zSSkaAeYkgBWtCreDulY9r9lgzm3qorQSw+3YTZZaCkwFOgT0ZHm9r4kZEN2bT
IyTV9ODM2usd6yYNAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FCpbvsN7/zpedd8gKoBFxLYq8z+7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LmNvcnJlenpv
bGEubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A
AAFtcwX3CgAABAMARjBEAiAzhZZvmE8a6TPPe/2mQ4K6RFM0O7OdD1boDb/GMyAe
uwIgC+lJZyMO0/0f2d4m40jmlkzJN8jvPALtRgYBUDE7f3sAdwBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW1zBfhgAAAEAwBIMEYCIQCfORbRiAUM
+LPKTr0a1J/pmNyMZRM1Cbeijatu0lnCQgIhAIxsjvL82hBXm0ZLZiPF76+QEcPw
lFKVRGCnPRaSL6SpMA0GCSqGSIb3DQEBCwUAA4IBAQCMI1UTYbl1bHOrtovESjtL
oF9LSddY/Qn/y1BK6zSh/ChnbX2ktKPh8d4G9DHPi5mWP6cusZ52agV6Ps6IiaJ5
bBLd4jbdN6QsykHGwPfitr0otpVij4mVvzWQ0L+NMZsUJ/drHJmxlownOWYu9SU8
ttYkZ9sgj7iJPlorLnDUXQg5IQd/nbMmqktSBzP5qxTOBUD1snoPTcRQyNczNjQ/
e2ULYDAS5K5ROl6mOjjLQihQzlpo1/LOTeBmJcfp/8pMtVVDdZRj0t8j35jc1u04
T+ZrWyAVtF1NEShZRqDfBMPApblEMvgW+YNR9n9WBqx3SZJfc0gbUOBtOrkk13mR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317059195179292030737981421754954862191539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 13:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 13:00:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.correzzola.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743819224791069679293379230317920219411839409944034408725695284850290592962674349608085828875978371280871057551315019416789449275597621317912303154388961476127502750770910943160675373723428459445443971275399442010518677756326029444055015884217889326548625034736084330140388580241994196698799611081622690570670870538060900067138878610574728831176839999471685690773914980357879216587188011922844231372935724990818077010215502280396579020278292447401571029552525319828996052506880799720315091456729631041902089785131890099885769540938234509647308738712579329049073058366540748046226637332847849085875930061455696619570163130779523111554082179645950946262040752772597629480170957094527589681989068752802271860194585013684326995536807025448798248085845770692029835394001495330562834341417253162940914105395442521179419080999494055682267144686313553819653521961163689506521007780124837789144245443828185873162888115714445251419638666738442434392257060595425557235294195702058615921966783265023627399044625303559347522729291989429121347047556059145113934188491962010302094544690825309355030968707378209171434433680190079471704850260364079775874631082240778205877878748095808569091036931734339056317130453857101594101677612848866824513332749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a5bbec37bff3a5e75df202a8045c4b62af33fbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correzzola.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7305f70a000004030046304402203385966f984f1ae933cf7bfda64382ba4453343bb39d0f56e80dbfc633201ebb02200be94967230ed3fd1fd9de26e348e6964cc937c8ef3c02ed46060150313b7f7b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7305f86000000403004830460221009f3916d188050cf8b3ca4ebd1ad49fe998dc8c65133509b7a28dab6ed259c2420221008c6c8ef2fcda10579b464b6623c5efaf9011c3f09452954460a73d16922fa4a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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