curacarpignano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:ce:b2:df:24:61:69:f0:02:eb:c4:07:4e:05:31:60:91 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=curacarpignano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:ce:b2:df:24:61:69:f0:02:eb:c4:07:4e:05:31:60:91
Serial Number (int): 319459609893672494179203033243685496119441
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:62:fe:1c:4e:17:b7:f6:68:b7:e3:dc:71:81:e6:e2:f1:32:7e:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:b8:80:01:05:4a:a8:92:b7:d5:bf:bb:e4:57:2c:3a:59:eb:61:16
Fingerprint (sha256): 80:1c:1c:55:5e:e3:bd:5f:16:3f:7a:c1:ee:6e:b4:fd:f1:62:eb:65:08:df:8c:37:98:4b:12:fc:ec:f0:dc:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate curacarpignano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curacarpignano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curacarpignano.org

Other certificates including the domain name curacarpignano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for curacarpignano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISA6rOst8kYWnwAuvEB04FMWCRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDcwMzUyMzZaFw0y
MDA3MDYwMzUyMzZaMB0xGzAZBgNVBAMTEmN1cmFjYXJwaWduYW5vLm9yZzCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALuzDiWqw8HbNJZXp+uRTOV3dHZ9
XGZU/IqXqXueUAbwmqMB8SIqFtCLHZHuwS0aJ01W3p80jKNA4Y+ZxpVY2hLV7zeU
xfyJ49ZhZ+JAKzIrXXiibLnpMJZhZkE8n5D0cK5xr8ea/B+1W5e/UGLbldi2FQii
f0A4ubRh5GSuu8JaV5/fDg5oXz2SdsuHl4FODv2cYaDK7t0egaMJNpY+lT02lzvl
YH3Hp9IFGTIst4S8ZXB+soG+mQSniuR6uRGuTc0xPvDfYxVnvAlcXbbtjdMjhoDN
qgrTLYloNafK8kxbKf9A/QGenWV3RKBmADsBCnK9dLUOPx7qUvE0RLP3xTIiWUg3
PkZKGFIr8mqRSQzxq99qzN7aQjUiFTmTWTEMXKvS9RTOmftWiro8xDtB0qXUZsZp
EirSIPYFZ6hU69zUoWFKRHPrYmd/Bj4nlqkGqSqpGd6f+HMIq3F6XLR3e0DmDym5
ERhvbE7Ym9u7xGXZpKQijv8wMUramU8rTgN6rxckoP+C5ZS6ZQbshoGgNT5pCUyG
k+By3g4f2EvaG12TeAAnTBZ+FJ2d6MS+VxCcaRKku/RlgBt1mf99Qy72EOHerijn
Jc6GDrzcj/GMw3rRwJzdT7sDInz5q86Bcm0pogOQ3FxOBpoe0vYOmMBd/2t1CvZS
YCgK3xgX2vndTETVAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FPpi/hxOF7f2aLfj3HGB5uLxMn6UMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISY3VyYWNhcnBpZ25h
bm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFxUvunuwAABAMARjBEAiBDVOuCDs/6FKTywYVE0AwkHGFNM/uSgqnkpZ3CnkDr
wAIgFSczlon2ccYtknW3PdYlS/IU9rxyZUpe23IoMprdt3IAdgAHt1wb5X1o//Gw
xh0jFce65ld8V5S3au68YToaadOiHAAAAXFS+6fuAAAEAwBHMEUCIQDXaPY3dlnm
R5BDBpSOuIqMyXtRYBSBdhZ5qicMpzfOlgIgP5q7X7PGMfBreix3S2VQH7fZ0WkS
T6m9wdUq3Jyx1mQwDQYJKoZIhvcNAQELBQADggEBAAAw7Zgg/UMNrFYRECkUj9oR
Bwu0t8p9XOWcf1X9nre0I3Hhx8QaG0K6+K9InpOY2rC6cK2yrZA0rFumXylu9b3T
C86jJoUTNExP2k2KzQxASxlAI/h7Ns/XE7ct0g2KdJF/L0rta5ExQkM2pAuS8YIJ
rbZjoUh9Ba6ztAGyMrFtr9TpzDt/n8F54yHj4pUAb2EbRuQQc6a/pj3yG9j/r35l
jjwCcsWQ1xHens6xTQtqtXSbCCeE9BkoDQmP4oLSXbnv+Mh9Kp7zqzX5gh9wMKGm
vQWij3xEKGQ06ZJ9d1MSLpXzJR53i6cImJqMYXQo/Gn/ysQtf67yrz6sN5IXUEY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319459609893672494179203033243685496119441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 03:52:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 03:52:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curacarpignano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765746885010781468979905181576912109287654253180299664314604413743302607751811585879900925091291324544090801222722109665307137848057049164978723710617234690558621118097359600064019163112151541082360239786521289751048024541733183888854195602201967966241020648762505595689255786819222168699037662282404341504013817025191311590214858769061556097507981307021648053110727336063632682978501624596108882728005073435127740800207298401383129091143648980951708078116928829606726050146809867605712938670678167575023005602667256145756843068378949883117192151716338375656684178984578197510591366667495014159064019775972120776524441814664891386558240740739937227385185740811152729568656909973320385825437011748634579630789593655823775767133506467423815643321523852880865978701145704334966724542478725813419593321871027563329465778120098930407980202573662222608155420967183902447072082780153799868042047249420870740574922265885603691932728110078629901263071939196612154750971669747081720671197204447157687035947547621749175978206494738435425051098316159273257068331502020746102880157551167797473548791469072075347239600014101273031731857053404876060351102569888375929428138988174430575024432307841198592342466602618282783467108897897444951194354901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa62fe1c4e17b7f668b7e3dc7181e6e2f1327e94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curacarpignano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017152fba7bb000004030046304402204354eb820ecffa14a4f2c18544d00c241c614d33fb9282a9e4a59dc29e40ebc002201527339689f671c62d9275b73dd6254bf214f6bc72654a5edb7228329addb77200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017152fba7ee0000040300473045022100d768f6377659e647904306948eb88a8cc97b51601481761679aa270ca737ce9602203f9abb5fb3c631f06b7a2c774b65501fb7d9d169124fa9bdc1d52adc9cb1d664
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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