forum.sfgame.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:49:3d:1e:1a:65:aa:4b:78:c6:0a:d0:2e:10:8a:46:87 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.sfgame.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:49:3d:1e:1a:65:aa:4b:78:c6:0a:d0:2e:10:8a:46:87
Serial Number (int): 302268092810157709233391611461171382208135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:3e:3c:0e:01:1d:63:cd:c8:53:7d:58:3b:97:fe:fb:96:52:56:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:ee:75:0a:be:3d:f8:a0:4e:b6:78:e0:0e:fb:9c:b9:b5:9a:aa:49
Fingerprint (sha256): 81:63:55:6f:75:b6:a7:92:3c:25:00:bb:78:41:e8:df:a5:75:51:41:4f:4d:aa:d6:24:1f:16:55:30:58:f5:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.sfgame.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.sfgame.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.sfgame.it

Other certificates including the domain name sfgame.it

(limited to 100 certificates)
s2.sfgame.it
sni.cloudflaressl.com
s5.sfgame.it
s5.sfgame.it
s6.sfgame.it
sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s4.sfgame.it
forum.sfgame.it
s6.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
s5.sfgame.it
s1.sfgame.it
s4.sfgame.it
forum.sfgame.it
s5.sfgame.it
forum.sfgame.it
s1.sfgame.it
s6.sfgame.it
sni.cloudflaressl.com
s3.sfgame.it
s3.sfgame.it
s4.sfgame.it
s5.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
s1.sfgame.it
sfgame.it
s8.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s5.sfgame.it
s7.sfgame.it
s6.sfgame.it
www.sfgame.it
s3.sfgame.it
s1.sfgame.it
s3.sfgame.it
sni.cloudflaressl.com
www.sfgame.it
s7.sfgame.it
s5.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
forum.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
s2.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
www.sfgame.it
s3.sfgame.it
s8.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s7.sfgame.it
s1.sfgame.it
sni.cloudflaressl.com
s1.sfgame.it
sni.cloudflaressl.com
s6.sfgame.it
www.sfgame.it
sni.cloudflaressl.com
forum.sfgame.it
s3.sfgame.it
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
s4.sfgame.it
s7.sfgame.it
s1.sfgame.it
sni.cloudflaressl.com
s8.sfgame.it
s2.sfgame.it
s6.sfgame.it
s8.sfgame.it
s2.sfgame.it
s4.sfgame.it
forum.sfgame.it
sni.cloudflaressl.com
s4.sfgame.it
sni.cloudflaressl.com
s2.sfgame.it
forum.sfgame.it
www.sfgame.it
s2.sfgame.it
sni.cloudflaressl.com
s1.sfgame.it
s7.sfgame.it

Certificate

The complete raw certificate details for forum.sfgame.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302268092810157709233391611461171382208135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 12:59:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 12:59:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.sfgame.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 941318452842502238394351539103384526410776819373502635461549240448477169647333003454244747550511918445217219097088671016138847470194898515522829308425058960308115989524791329558077933991877071348362251668982724629924323846040219429818391844549237600260699504560702416388089598445068710848621461918031637748585785067597061301274273828982051807264895139137451269567223887620260652639394075903120899406919756595133835110376487485401705179187321677580315690075480912047782939031673845372035088623141520542955216495341284989287892659914896991207659444199936894261928652895684676019244035152447487685860524257359875989151208919049596219490982502550478150526997762948160567662384088898557491742582736641795437154646045183532731650933312803730177541250625523760730318799457899798596601320655370205278659370540664067916456592246475587096100513419693972638594200109150991516667068101656789673159817716001105171310923381807431827597499450966216584606854351047291590715463283605860857018503842928366710779052132052838848815980923629175492987805660645645675458836064115186147172132597188960994433140274018634468265815498187633928037459214166195132939255415580423100344166870808214202963030280492640802541701943830375074386879429980555591779214351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e3e3c0e011d63cdc8537d583b97fefb96525693
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.sfgame.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d44abe9840000040300463044022051ce28cfa963104793dd46ec6cfdd0907272a461ac4ce7748a41f594c62d1f6002202a4df2f6b6800a5ab788060f4794428e2b698b09d4622e86a30c47228254e554007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d44abe974000004030046304402200c084ba9896c44b6d434e4ff30441a85e839d0df109d01a10d575bc9cf4e3e3302201fac5dcd8f2a7d8a97881ec4faaa4b3d373ca8d4af89c73a1d733ebf1d64ab45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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