www.pianezza.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:e7:9f:01:58:69:42:32:9e:45:6f:81:51:91:f9:24:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pianezza.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:e7:9f:01:58:69:42:32:9e:45:6f:81:51:91:f9:24:ec
Serial Number (int): 300436924893781611238010300531608162739436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:3f:83:04:d1:6a:2f:89:7d:ac:a8:55:a1:5c:ae:d9:b8:02:ee:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:f8:f4:43:77:d0:8b:86:57:f4:cc:6c:0d:cf:fe:51:61:c8:5f:52
Fingerprint (sha256): 7f:15:68:8c:1b:8d:30:4b:25:9d:d6:40:cb:1f:d8:28:55:93:c9:a7:06:90:9b:77:b9:a1:24:3b:c4:7c:f2:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pianezza.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pianezza.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pianezza.org

Other certificates including the domain name pianezza.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pianezza.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300436924893781611238010300531608162739436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 15:42:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 15:42:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pianezza.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827594507686625312395778971859672232935642747155428688260504532229130932750996112805578743867752839853643937836323706418723983063930680232414825746702458914341213016071774514018215933955291915943136430424542458417183747361731370763582870499694199935217088609678634140677748087680357425034114322501855582421120683156862324971549557510867656227448161949395052130522886713874263792207664242550699287046657169464119393041706900916438191333552910047962244538943371021390764568667373684821462227100658735083684494665072987405590838921098208668852693835013086903159200063186615351254952793376399316937169903563909072096798884584931622280889652269898741884791189607965372788725902563397673353914581675754458342845848646287854818498162917408453738001915731888234803091765455449577020362128522966981197335417093952250351390908319132229726873025717954326886739963224075712842722976149241806096133754397526022294650704119066512213710462563513417423517134476827693470448970952824848498514942242180179571810713073001367947201394839684052508681623043468269366744540837045199662606304935506004412672097541499600196944285100330064915273437105879468584954808530882967112623562960944757591797818910773362116789563947525019989570788049587499872049711623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed3f8304d16a2f897daca855a15caed9b802ee3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianezza.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff526a76000004030046304402205381ef7f8f70cf8da25b38c1eef4a53924f5190543cf6b191384e33f1c1ae21a02206644c76a70698d5ac7160876853e2c2d7d2aed02f3ebf570b920c025b96039ef007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff526a640000040300483046022100831b5c9943d8c56e5b683eae1315f5324b19bda9359d924ecb3836e412fd8809022100a66e4d03b3000113fef8f64ae5207e7cd064ce2787e4fcffc54b26fb486b9a05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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