www.pietrolungo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:7f:78:a0:24:fd:a9:27:03:26:c0:e7:29:f6:96:5c:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pietrolungo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:7f:78:a0:24:fd:a9:27:03:26:c0:e7:29:f6:96:5c:b4
Serial Number (int): 268992508146745349266199671737031358569652
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:b9:e7:be:9c:4e:90:c7:da:61:3d:53:fc:5d:86:6a:ce:d4:c0:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:7d:19:52:f1:4a:d7:fb:89:7d:91:c6:78:08:7c:54:b1:06:c2:08
Fingerprint (sha256): 86:e7:be:1c:c6:b3:71:43:cd:8e:dd:90:73:ac:2d:d3:1d:c4:7c:6b:9f:a6:8d:1a:71:a4:f5:9d:cf:6c:45:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pietrolungo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pietrolungo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pietrolungo.com

Other certificates including the domain name pietrolungo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pietrolungo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268992508146745349266199671737031358569652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 22:42:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 22:42:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pietrolungo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 967753707991327960299386584802086019490013060250682109211487412046891631491275120890288140357475329840163656513826711723845543817213102294513361807788134068664714258321471114298871071655656367242577187004120618838728425676191136843339246674340828092152899103888945498486572736478498288347301570806392840472287494815982039612978377679066981332363946360646011738082765368612737867918151695834308653422891466591629597719952641451484637525767107439311144880389299327754158663588310895517614130231565082096657673047689751380339066035034482504081034614905916495525476778842743671931217984674478766881397641753946845093957382772207674948295636423324803174701050384449999049425122718357189853729793842832489006240842544726451087107653111469148590321153376366703197488828742430337791649029928396832278636083015798569190953757845251406705220143935039808866592555122072746241522251062556794906741247950436340084988749730285086239092585870093820710850561016375300343060447090564187131548854800105230596936703131394842655936455205894066952781928430321950033994759655936638377025373241490529136769415436178641756806246207770307130522993959966053529082481610357022100524234125459340479151218471920455604480732094462849878131105846208827676077041423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ab9e7be9c4e90c7da613d53fc5d866aced4c0b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pietrolungo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c30aa2d1a000004030046304402202857e588fa4e42db22e2af29d8df517474ac25d166f05eead14a8896ae439157022041f728166e3247599b5cb19654821e85c9f3a4c4c80cf5c5fb8f47ddf2e86371007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c30aa2d370000040300473045022100d3b8d28e774baa8387faa5dd8c91a6843fc0345d2aca83a55d8514cd1553540e02205e6479dcf1664c7cf0a4f00d4956564c0872e1482226d403f9e147c90b7155b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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