www.santarcangelodiromagna.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:94:bb:2c:e2:21:6e:46:48:65:17:ab:9d:f5:a1:0a:58:70 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.santarcangelodiromagna.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:94:bb:2c:e2:21:6e:46:48:65:17:ab:9d:f5:a1:0a:58:70Serial Number (int): 311947446782326415439110981152499592484976
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 74:17:1e:9a:67:03:f4:28:c3:97:01:2c:fc:b3:9d:51:ed:38:8f:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a1:14:68:0c:2e:74:9f:ba:aa:61:ce:7b:f6:f0:8b:80:a9:9f:14:2b
Fingerprint (sha256): 83:4f:9c:d7:4a:4f:79:96:1d:2c:7b:9d:05:02:c4:78:f0:71:91:2d:f6:5f:01:77:80:09:fa:2a:db:63:54:60
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.santarcangelodiromagna.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.santarcangelodiromagna.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.santarcangelodiromagna.org
Other certificates including the domain name santarcangelodiromagna.org
(limited to 100 certificates)
www.santarcangelodiromagna.org
sanpietroinlama.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
livingroomagent.casa
www.santarcangelodiromagna.org
buyamazon.world
santarcangelodiromagna.org
www.settimomilanese.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
sanpietroinlama.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
livingroomagent.casa
www.santarcangelodiromagna.org
buyamazon.world
santarcangelodiromagna.org
www.settimomilanese.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
Certificate
The complete raw certificate details for www.santarcangelodiromagna.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISA5S7LOIhbkZIZRernfWhClhwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwMTI5MzhaFw0x OTA4MjYwMTI5MzhaMCkxJzAlBgNVBAMTHnd3dy5zYW50YXJjYW5nZWxvZGlyb21h Z25hLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANAzUpqPP4xa q7gz5Z4njSo7xuT6scffuFKWkS5AmgISMm+zrLjfG2mjk9LhgldvFG5bH9UEc5eK CJiTOrSIf4qHMbNmtzt6tkrs+DlXNxjfXgFA1sJcMZZkj8LWEdP0zEvbebW7x5bm eKlcvEPAUAC5CC8v+I71ROv3GwxrDIqCO0D39/f48k2+iAaTaSAE8I3u5VZHUDHj a3Eq+qHY4W9nw2gmyu1uJQQ4Y4zAH9aieLecdQp7NLoKmOnNCtHOW3AM4/OOkwCn Xrz5ChkDJJu+v6WbHFtMTBVdCsyrs4k9b9RoHwo1AAJ6dMxy4OVq7os6ZHGsI5kK lOpM71vI7OXURng5UbS8RhGb264R9r7cdKyOdsZCbHzptMfKjaXYCbrnpOMopSzs uZQWOPM0yWxGDrx9+71st+3rEBE9hC7NPYL8pBgCUpE+EDgQ/r70eVvGx9p/C7gW sI21VGRCzC1yukSWfQ/hgAxOEr/myfxEIldXKmtCNKenLaN/mFK1cvQXc8Ieh5fa avC0+woPK9QGNwh22/xreIzn9SMUc2x14/YwHeMDG2Y4wvJm/UKW/aOhphkNUXVI ZXXyjdUEmX3zwZweB3U4Ry+0dUnEALf9QWZg7v19WUqUKSoAL9Zu5yJSYtcCukCG 8460/5bSoyQlJgVYwkb/6ewAWy1fLMsbAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFHQXHppnA/Qow5cBLPyznVHtOI/nMB8GA1UdIwQYMBaAFKhK amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe d3d3LnNhbnRhcmNhbmdlbG9kaXJvbWFnbmEub3JnMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAb1N2rDHwMRnY mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq/EWR1wAABAMARzBFAiBoDL+6vhaq H9/1tdW1GuowdY8N7abuQq3jAJXuQXnknAIhAKmB32fX6zAd8qfbqdyBvw0BVvpP 2F7fIUFy3LloY0TOAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A AAFq/EWR0wAABAMARjBEAiB1nfwuhdi6pl3P71mbRqw3xT/zYSEKpgtmxg9DgXsY swIgRNhiAQplR17qft5GMAt1UJGb8VZFYIWQjJS2bnIARycwDQYJKoZIhvcNAQEL BQADggEBAFF3kPX2a7U6JT0piG8CR6TQKAyEO+uEIIJdgZua3jQGL7Y9ybVOjYUO la0tFTpVYLDSVORoMr9j9hTv3Qx0CwaXaQ7oc1I1LZ0BVn5aehYmKkMUFlpRQ810 k22xqbj05ifb/ntbmzqDvqyfc1sUBLbFUF/RpyRLvEnefcLFfRNkI0sJYfcrrFFX CntOril2RJi1Bmc+Hj9HbMQyuCfDW4+5BohoJgfqULz9YR2Z7i6IeqYoY4NULTnC yyfbxJuA0cp6UwzBaMZ9rBNg7UuVKenAU2z15duk1vVPsZUs6suqQX0ly2G9WmVA lN0SKdu1CfZ0PfjBhal4xNEB3L8/Z4s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0DNSmo8/jFqruDPlnieN KjvG5Pqxx9+4UpaRLkCaAhIyb7OsuN8baaOT0uGCV28Ublsf1QRzl4oImJM6tIh/ iocxs2a3O3q2Suz4OVc3GN9eAUDWwlwxlmSPwtYR0/TMS9t5tbvHluZ4qVy8Q8BQ ALkILy/4jvVE6/cbDGsMioI7QPf39/jyTb6IBpNpIATwje7lVkdQMeNrcSr6odjh b2fDaCbK7W4lBDhjjMAf1qJ4t5x1Cns0ugqY6c0K0c5bcAzj846TAKdevPkKGQMk m76/pZscW0xMFV0KzKuziT1v1GgfCjUAAnp0zHLg5WruizpkcawjmQqU6kzvW8js 5dRGeDlRtLxGEZvbrhH2vtx0rI52xkJsfOm0x8qNpdgJuuek4yilLOy5lBY48zTJ bEYOvH37vWy37esQET2ELs09gvykGAJSkT4QOBD+vvR5W8bH2n8LuBawjbVUZELM LXK6RJZ9D+GADE4Sv+bJ/EQiV1cqa0I0p6cto3+YUrVy9Bdzwh6Hl9pq8LT7Cg8r 1AY3CHbb/Gt4jOf1IxRzbHXj9jAd4wMbZjjC8mb9Qpb9o6GmGQ1RdUhldfKN1QSZ ffPBnB4HdThHL7R1ScQAt/1BZmDu/X1ZSpQpKgAv1m7nIlJi1wK6QIbzjrT/ltKj JCUmBVjCRv/p7ABbLV8syxsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311947446782326415439110981152499592484976 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:29:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:29:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santarcangelodiromagna.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849383849858571499276256557698001167602836002473886936919710379540562435038235036545256084454234438654152069380222214356494765600047662021973627842896884168417076423910669662817770640757255117776714020128975494648706129654913716476486385810331126244597798615681547292926495459125176639942100805837821174671262011914999677533859428785450117482498832501829932592714845939261972171776158766208014148093148399269171106290271474744595499451970544357291703008926333727898753213563219998467983913910431440716970213062560607810299073546199079588972652331964927331598007989427626171473323690237917661480104912857359534154363856336481653039579777112612201400463902186159706140186336586876292700390710598572673607830217117418748391587830773772436956757727168704302101387035055421753692246445686309285248336032228372130834423590440212386328537321791748872142447588780966167962094459490536764425797488797332490694107327251560273247061936549462851378507132274804969759800293664370469460208203051887942989267061969065685810341210430221509450531133617723605065833018692125435028189513095241579513928194554024122653023899087506734206501603058577057903628801342266349860377798387152227862345645708184408946190528825746890434600973566056953194683878171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 74171e9a6703f428c397012cfcb39d51ed388fe7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santarcangelodiromagna.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afc4591d700000403004730450220680cbfbabe16aa1fdff5b5d5b51aea30758f0deda6ee42ade30095ee4179e49c022100a981df67d7eb301df2a7dba9dc81bf0d0156fa4fd85edf214172dcb9686344ce00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afc4591d300000403004630440220759dfc2e85d8baa65dcfef599b46ac37c53ff361210aa60b66c60f43817b18b3022044d862010a65475eea7ede46300b7550919bf156456085908c94b66e72004727 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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