www.pignola.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:a2:d6:3d:38:96:8a:4a:77:e4:01:38:ba:99:9e:a6:58 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pignola.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:a2:d6:3d:38:96:8a:4a:77:e4:01:38:ba:99:9e:a6:58
Serial Number (int): 264956128793045360257482085949466052830808
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:c3:a2:ac:59:71:01:de:bd:51:61:ea:2e:e2:14:f4:ea:ef:85:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:0d:7c:fb:f6:fa:ca:21:e3:87:26:ad:e2:d7:d6:e6:3b:98:1c:58
Fingerprint (sha256): 7e:b2:2c:e9:48:91:3d:4f:3f:74:a9:aa:42:54:a6:1b:37:20:a3:bc:67:8d:95:50:be:c1:ee:25:fa:09:09:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pignola.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pignola.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pignola.net

Other certificates including the domain name pignola.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pignola.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264956128793045360257482085949466052830808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 19:52:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 19:52:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pignola.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756531303425824704176983263316379669566932480770670013671404126816109121617967043311054283843181269692643449730262173328626626104106661418939347159428219154715731952088476790970850165593375015437539240525339232966990676331906300365608153905076522318771297624312100533392964127379546212607741766611685232026675607522574623761758353111499123685083625550747377835312177314205218021858860994182904549802791192438419224065710249659385898032267276427141362190220438367875553365277707119496906766892419371859303546048880107125079086429339077183239238100881149399925710251982745641071139222425343937235551017901435718124036941730629267482614467297358059737129802189475304224666502498891224364111959419141360803715543369688063422150408762908849160417420464180731745622445906896854150640174140676931781347169409603634621752452247401771481679679636710710009560006607585202680785196524325376555004070257701894197539366353896823078885078595014421366884150345886698294244608032696700496427635627327069729043570851620660412970567418384893470119636138789286820521594295920139932627877667056334688527991399906207060896089198160250126146011318786744739020582464030276129450955343268472832676372618718178246497951964408803449303153914921594223038006409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0c3a2ac597101debd5161ea2ee214f4eaef8541
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pignola.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d747f4acf0000040300473045022100a548ab82e2c19b3cfae10b1627048676a11c1c7fe0db56e6c40009017558082502201701db8087aeb24ce322a468995137f4af173197b907f1d5ee7858f7ecf199e700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d747f4af3000004030047304502207c193a3107deba8ccf769892a479f0c3665057a1224032bad0ff99dbe5540c060221008b725968168bcc0bc66f16ba3aed5e087b0b540a6e4544378757a1dfb1f79715
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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