reggioemilia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:1c:a4:bd:fa:bd:50:47:dd:45:20:99:02:85:55:6c:ed was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reggioemilia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:1c:a4:bd:fa:bd:50:47:dd:45:20:99:02:85:55:6c:ed
Serial Number (int): 319903498679489978450767846371146000067821
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:7b:01:2c:a3:69:c1:56:b0:94:f8:0e:11:79:f3:3b:1b:24:9d:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:0e:36:23:d8:2c:fd:e7:11:73:92:56:87:83:67:35:88:46:24:c6
Fingerprint (sha256): 84:ea:a7:a0:6b:c0:fa:98:f0:b9:3a:1e:0e:d8:79:d6:ed:d2:99:96:45:e3:0f:67:ef:74:4e:6d:39:43:12:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reggioemilia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reggioemilia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reggioemilia.org

Other certificates including the domain name reggioemilia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319903498679489978450767846371146000067821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 16:15:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 16:15:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815202577646555591599481127664167308528747108648941458975253166768071066622921527765503695590080008389766401615506926345280987670705769311732082988554122233063903678675370738710504934392862289952486988496040693684536819397437196328104717425556836774907325792663951893978543757026389970941512179062681742996336121487486905193710344609539524195288438766851743819075784683017598001299390965820020052399851929792697176766618828541216526545625931186306767184058740143829144003570123841803923644759174265499014167637069093182808478286276134099470449144346383577830554798482400183912106043730276704039476245522427573955450514955630789511315604371891072850404834792195842180466977576332090731835341219858078864477910985310244039402197844976306939858401562086551084792529009384819245009095174527514472781112040755664326423669816644269133360246962701658273004595215076259079298129359308404425652866328215229111009038136764915318855583702030653596565061287246926260034456099103700389676634492702417595224384582063814368156330121315340749133313969030472042205036523504121351767991548387857576055967191020659649228286987111163454572815985834730323107774705067586844559215027325756450305829480812137903905021956263921362909803819030244395989585481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb7b012ca369c156b094f80e1179f33b1b249d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afa4a8f960000040300463044022061645f79e61b7b271443c5297420b169cd242e9d0c69a2c22148a09ff25623d802202b98b49dc9ae771aef7d59b78528dd02b044fe55ed7b7c303f92dface86d62ae00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afa4a913c0000040300473045022100be47b29c01ccd6cfb81819eb7ce8537a80c4ed1f6eeea00e61c411b2615352b40220587715fbb9ce96477949f682d2d7b6ce9a1812885909053d698151177e3ec0df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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