www.farfallone.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:eb:3a:30:99:24:01:7c:b6:ba:d4:15:39:df:c7:ac:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.farfallone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:eb:3a:30:99:24:01:7c:b6:ba:d4:15:39:df:c7:ac:7a
Serial Number (int): 264031505081643272532436395931732466445434
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:92:d3:1b:d2:c7:fa:fb:63:17:7b:c6:ee:a4:74:3f:77:75:cb:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:2a:cd:13:75:6e:4f:f7:82:41:2e:81:cd:8c:1b:5a:df:ab:f2:4c
Fingerprint (sha256): 89:62:e8:6c:a1:e6:3e:b0:b7:96:5f:7a:94:c6:59:d7:16:c9:53:3f:c7:17:48:4a:37:36:95:c7:3b:46:d0:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.farfallone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.farfallone.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.farfallone.com

Other certificates including the domain name farfallone.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.farfallone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264031505081643272532436395931732466445434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 21:55:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 21:55:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.farfallone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903685559674609039013245396984443230613253373156641891419522153123867056940699177837389844168829667490858006996272914547003531571205676675700973772077783980102724071049450479469134751277179916732205334443453146107215792349602432951760855183659684622969234759338510628003047977592869507437513651867792203852594136242759277626484655763443941946603283877423872088191164463488625157026404741047403607958158502897038429034624947617550902097471575118782439186667698825571930071231368406913281593777245706851627927286119988749069060507772524357340316581869281271630353646204879713071095598929082857357800012141830571270819111511814997907687214430404312883453324268464121108742158909166396596408356286418999357890508834789222728129339016412452900697440454412409843059615400832243483644656103355225286836411355497865135302044729259644453798919664221724409067080442605360036321185832445857317798465926635598183238565335047470085952963986369902347872728346267805237131119235499544736016624830539328890669295122700311330985517351246710955110859934635502885373934595305842318337680725479080888043143553483966566801332685881664479505252908449901506299420403376136351626857266538988432660812163586438838018662704241322791171411307785512881478727319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f592d31bd2c7fafb63177bc6eea4743f7775cbcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farfallone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c307f6ba400000403004730450220415d8fcdbc000c8eeef70bb447e2fdcddb772b7d23cc18db560f831f84aab37c02210092c8ca03aa023273184baca83bad3ade6c64f4fd3e26b5d53d874294a6a85713007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c307f6ba100000403004730450220361de53e0cbd4e86f95ea0b0908ad488f1f14c0102271bbaa19637258377fd06022100b31ee4a2caa304849af3e42cf54cc3240d030926db0124b37422c179b1753019
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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