giurdignano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:05:a3:f5:f9:b3:88:b6:b9:8f:fa:27:3a:68:9c:0a:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giurdignano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:05:a3:f5:f9:b3:88:b6:b9:8f:fa:27:3a:68:9c:0a:b4
Serial Number (int): 319532640012101811402651010353107033655988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:ce:b4:a7:fb:40:f5:66:2c:11:d1:32:d6:2d:84:17:6b:e2:84:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:24:7e:e5:b6:c8:95:72:00:6a:e2:f1:c8:6e:01:bd:69:db:49:db
Fingerprint (sha256): 88:a3:9b:89:1c:2d:d4:a7:78:21:21:de:e3:3e:94:e3:b7:7b:c7:89:7f:64:3a:bb:a2:2e:61:fb:a7:94:eb:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giurdignano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giurdignano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giurdignano.org

Other certificates including the domain name giurdignano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for giurdignano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319532640012101811402651010353107033655988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 23:20:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:20:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giurdignano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848610229704551544318605751485517249666064931948579586882576502802444998710336259522774586902880429354707049328331303871333138115413167280775539156574630741164108976011510346570708410479218768323341477368920172985434587088305496914864515934758706856578625752234402607999098310233978612800443907226603165562015939036758914469413084706688705026488777170146241162662435976946782714868259061683565290397894072663635075077615819779708480945940790909133412070746352533436518452594161821384534380599454971577892173310064816173217767482751574097779921635733906730395645435670464059387050011631615122528419711437934627922098344250155625186693815028089624602768046607271966119861312979357164154556186084201167470375021362370520127193351800563901581279584650901079728686423298900173146565265826927671788242200285207686934929606317413657888197853931244381421648423683387851015312049110589591227796921083378164510542746652809806107429063807055470068344159121503497026606116837692433422133507269170169255973299449828245778962877726989230005397126130242140166970490410079716504391838755959985815364189675796435672766040240874485960301557739994222441886603383723146763833318944907334827213033903568498032204929651266555304794829236974725520909318757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88ceb4a7fb40f5662c11d132d62d84176be284af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giurdignano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7f8aab1b0000040300473045022100d96bc187dad90b5af0dbf9b426039b7b1de6f07f846e46bd227e1df6dc16981c02206723bda28fa3e800d1bc96a1f3ea4683e94ca49081aafc4c685252481a47fb53007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7f8aa98e0000040300473045022100e6e10a460a2c1fd82e78832b833d54afd2ec9e2bda95e3e06207d36f79dae05702207a987030f9810449eb9851dd33d03c7be62e9b7990fbca1b1e753028bd2e9529
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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