www.castellettosopraticino.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:41:90:ce:73:6d:66:55:9c:bb:87:52:f4:36:01:47:72:e0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.castellettosopraticino.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:41:90:ce:73:6d:66:55:9c:bb:87:52:f4:36:01:47:72:e0Serial Number (int): 283647692430832271229022493075811412177632
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:c8:ec:36:8c:50:6d:3b:cc:c1:88:13:8f:96:79:40:5b:8e:55:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fe:3e:83:69:03:10:02:04:ad:01:02:8a:e8:48:8c:e5:36:42:ce:b4
Fingerprint (sha256): 88:34:ce:9d:b6:9f:e5:00:32:c6:a0:ec:58:3b:c9:98:76:53:f1:20:6f:72:a3:03:a1:d9:26:83:e4:1a:40:09
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.castellettosopraticino.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.castellettosopraticino.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.castellettosopraticino.com
Other certificates including the domain name castellettosopraticino.com
(limited to 100 certificates)
castellettosopraticino.com
castellettosopraticino.com
calalzodicadore.com
www.castellettosopraticino.com
www.castellettosopraticino.com
castellettosopraticino.com
www.castellettosopraticino.com
www.castellettosopraticino.com
castellettosopraticino.com
castellettosopraticino.com
castellettosopraticino.com
www.castellettosopraticino.com
www.castellettosopraticino.com
soglianoalrubicone.org
castellettosopraticino.com
calalzodicadore.com
www.castellettosopraticino.com
www.castellettosopraticino.com
castellettosopraticino.com
www.castellettosopraticino.com
www.castellettosopraticino.com
castellettosopraticino.com
castellettosopraticino.com
castellettosopraticino.com
www.castellettosopraticino.com
www.castellettosopraticino.com
soglianoalrubicone.org
Certificate
The complete raw certificate details for www.castellettosopraticino.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISA0GQznNtZlWcu4dS9DYBR3LgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxNzQzNDBaFw0y MDA1MDMxNzQzNDBaMCkxJzAlBgNVBAMTHnd3dy5jYXN0ZWxsZXR0b3NvcHJhdGlj aW5vLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANegNKEEm+Oo XKz89mvKtY7XANOSMGXSn4cRPJA5aXWj97ER5HkDCpd7k/t9cRcyLV1Bn0ov2ASl PWm6AyVxz3xqal4KbNWDjCwVXR78Qq1trdZc/H6cMw0d6ns9SysR5CSAPlaEGg4e o63RxblltSf9YTcoHoI/P3XlJkjGVnZWJNK7LaRjLS3x6ueETPX+lhgbSI9UIaAK kdBHT2b9JSnRCuY50FEtA9yMaEwG6a9fK833GRiZlrU7eYZ9nPDODohuVwA8okm5 Smv6H3Vta60hP2IqSJvGE4kT1hRDCwePnSrhZSr0dZ3CJag5OVzoALbGobHQKZoF 4tozxtuIQOuCQCC/LOopQLbpxbwgUaaX85aimdJBXGajQwMvJIzpjvyfCyo/3/o9 ejfyWDFPnXemk+pPAURNRFw/hShKpdjocEjl885CWV5jTNDEOIo4X9h6uwcVyw5X KrNn8T+GXjScgTbL+/n5rXFchVeJ3Qk9w7NoYiZKGStPyGIzLkc0sx8UvmlQxt4p LPSweQm80fkNpNvX8OwiaTmyLd/g1eKWNoiah3LS88ycAlw+kBTymWj4EROpFWrC 3ZLgY0WDpIXfTrop6WMPVxHEA7MROQKVXrPXmf3HKoq/BwiXhhZMTR/9cQ7kqszK i0+WxQgLi+hyaCCwj1C4bherMBea5DK3AgMBAAGjggJ0MIICcDAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFDPI7DaMUG07zMGIE4+WeUBbjlWoMB8GA1UdIwQYMBaAFKhK amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe d3d3LmNhc3RlbGxldHRvc29wcmF0aWNpbm8uY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA8JWkWfIA0YJA EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwDF2GsAAABAMARzBFAiAzGE1TWIw3 pvcHuPC/n29Dl3tZ/pAqBG7em5m3/3bGNgIhAMxmxsurrHPm1knouVn3OdXvy2+f 5rZT3HlrTC0nEyUqAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFwDF2GpAAABAMASDBGAiEAlWKdLohC40taN0ZAePDeCYGyjuVeqC0FMPGguhP3 Y1YCIQCk7RX96HLpWdW1Fy9FFtprizbLJWKLxeVXPeCJkNZ0EjANBgkqhkiG9w0B AQsFAAOCAQEAd0VO0orSSn9VCdY1t1xphhiDo3I29fNpW6aikHc0FRtJY2r3LuxU msBYIG4o8H0bpfjJ1w0n/5MPnGqrczUyVIb8jgEiTnxRij+0fz/+FqIf/9e+Rg73 MTHsQ5bMt2Q5XcIWEND7M0m5ag0YHUvewZQErMRo7/PcYwtuMzJdo8SKytoIJrnW 7pLeggdqIWXj/AvVD6b47973YgDThAWyZY/ozK4DFs+Uky16giVl5WY+Ya3s1PvJ QJjMX7+X7MOTyWsXPdjLYtYe1SRu2y1S6HNviyiOMEmjAPdLwGvzN9lx15xf/xL6 RZv8X7DlMRq22Fu8K88culJsu3UTDwni5g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA16A0oQSb46hcrPz2a8q1 jtcA05IwZdKfhxE8kDlpdaP3sRHkeQMKl3uT+31xFzItXUGfSi/YBKU9aboDJXHP fGpqXgps1YOMLBVdHvxCrW2t1lz8fpwzDR3qez1LKxHkJIA+VoQaDh6jrdHFuWW1 J/1hNygegj8/deUmSMZWdlYk0rstpGMtLfHq54RM9f6WGBtIj1QhoAqR0EdPZv0l KdEK5jnQUS0D3IxoTAbpr18rzfcZGJmWtTt5hn2c8M4OiG5XADyiSblKa/ofdW1r rSE/YipIm8YTiRPWFEMLB4+dKuFlKvR1ncIlqDk5XOgAtsahsdApmgXi2jPG24hA 64JAIL8s6ilAtunFvCBRppfzlqKZ0kFcZqNDAy8kjOmO/J8LKj/f+j16N/JYMU+d d6aT6k8BRE1EXD+FKEql2OhwSOXzzkJZXmNM0MQ4ijhf2Hq7BxXLDlcqs2fxP4Ze NJyBNsv7+fmtcVyFV4ndCT3Ds2hiJkoZK0/IYjMuRzSzHxS+aVDG3iks9LB5CbzR +Q2k29fw7CJpObIt3+DV4pY2iJqHctLzzJwCXD6QFPKZaPgRE6kVasLdkuBjRYOk hd9OuinpYw9XEcQDsxE5ApVes9eZ/ccqir8HCJeGFkxNH/1xDuSqzMqLT5bFCAuL 6HJoILCPULhuF6swF5rkMrcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283647692430832271229022493075811412177632 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:43:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:43:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castellettosopraticino.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879676528343171939326730731863769125101644392965729664710846920772482090852930616024708759626142608228620329963707995985068425260075798052265772987465026231659818145841364596863393207423146203333164549222981784075380477731588267593694569936264799232688823769297155615482750457446447086528616076215412794708987268569273702659927358044488585823854719834888625929064879769973745302950955199277893295538433098967989218027156576123474237497549116607205393708868968802714495668711385159576675914155771252421759229914766701999694872004340665438504288042810909876999990416568249402405465631709089921912225611071269916694032494421863269645547663898151160094401300044547171970574009038923783069168506829049839314936751800754343924507092616348286014111767177001632706593765735479020736488706193801458674143246835902225819599559713632198371082254672988687125688603616303146482415538809675057738900516376826166982170991463042097620392034778643130573044714551958154082293173271185336260203652917024176054389932034745782860892816751974239176933303247449953341158771837455143218050479960758998644599713603548996921260033585734593544812096456808226428914347133842052928479036699569918200232207458883648429610523846989307211119215062091829911006491319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33c8ec368c506d3bccc188138f9679405b8e55a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castellettosopraticino.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700c5d86b00000040300473045022033184d53588c37a6f707b8f0bf9f6f43977b59fe902a046ede9b99b7ff76c636022100cc66c6cbabac73e6d649e8b959f739d5efcb6f9fe6b653dc796b4c2d2713252a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700c5d86a4000004030048304602210095629d2e8842e34b5a37464078f0de0981b28ee55ea82d0530f1a0ba13f76356022100a4ed15fde872e959d5b5172f4516da6b8b36cb25628bc5e5573de08990d67412 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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