www.torremaggiore.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:79:d0:1f:f1:4c:f2:60:e4:26:45:39:f4:a8:87:2f:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.torremaggiore.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:79:d0:1f:f1:4c:f2:60:e4:26:45:39:f4:a8:87:2f:f4
Serial Number (int): 261498775028389788762129848651382144839668
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:38:be:8b:33:6a:f3:a2:39:55:fa:d8:6e:28:15:4c:4b:41:06:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:b0:48:15:b5:d4:4e:7f:32:60:b1:23:72:c2:d6:66:45:fe:d0:1e
Fingerprint (sha256): 7e:58:72:e6:f6:83:af:1a:5a:62:1d:51:07:be:6d:a0:20:80:12:1f:89:46:73:67:36:a0:f5:0c:f5:fd:30:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.torremaggiore.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.torremaggiore.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.torremaggiore.org

Other certificates including the domain name torremaggiore.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.torremaggiore.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261498775028389788762129848651382144839668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 23:19:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 23:19:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.torremaggiore.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712891076369408111502602416575367112880597211010990022059314361628453987571376838563826934543838131331797469831865353961583127081486816412623216890657367554059944274237107588526373519231033154880131557573076677979908712775885368489811291232378838742216556598709891530091913034600344721021704040832535038937719130069334602204961996451617050560729454669049094511509620060640120638709341551776595762421754369951723072101799524045067976509344364689116876096707908765070892971217878046958886514360301147585171094517269650404673149033012788711928243596799940259469999889332862853928476295021917539200740311162951289977834694496725116609893517867577097838858393775379432013026550285624281616226240150885944739964675419232851667944434292692991628457573434181962302058933062522379142271883662608795872977837533986198588019818999013650538419443434045632809221836223754426531348170901860761161817370728303865270138313665874249315306993939510761754973374556356090388438233275323887362117801236472593812999997722817472910164740922835231138807213310356503358599457500303051378799756407587611724474331346995119561829112141375020872252655591161493045616451208267219199134869135328772986177493814932256348382905793497176250058886746926581003893003047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c38be8b336af3a23955fad86e28154c4b410681
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torremaggiore.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed8936a390000040300473045022100d0585060e8a1f8219dc20ad5e58c4880e54778d133f1e667f071630b9986983002204687f879ac9f327573eca267df8f22fc8fa08a9b63f1ac4bf168624c2905567000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed8936a6a000004030046304402205d076226f57f23b3fb4ac0742a6f454011282bc6f24d57408fbfa767b8f594a102202f5f622b029b17aae49d515d32030a0eef6413a21763293196801e9e6064a9ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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