wintek-med.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4b:33:f4:d3:bb:75:fc:d2:c8:4d:18:eb:a1:6d:04:69:8d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wintek-med.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4b:33:f4:d3:bb:75:fc:d2:c8:4d:18:eb:a1:6d:04:69:8dSerial Number (int): 286927097157010246058601646175201112910221
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e8:5b:62:f8:cd:49:7b:2e:70:d0:95:b9:20:2c:59:95:0e:37:43:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ab:a4:82:a1:f0:71:4a:3b:37:a3:ab:dd:ae:7e:0b:ce:be:95:ad:4d
Fingerprint (sha256): 89:85:32:cc:f4:98:f9:80:b1:ee:03:5c:cb:f4:00:d7:ec:21:55:fb:4e:45:cc:f6:a5:0f:5f:65:9f:9a:8c:f5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate wintek-med.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wintek-med.it
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wintek-med.it
www.wintek-med.it
www.wintek-med.it
Other certificates including the domain name wintek-med.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for wintek-med.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISA0sz9NO7dfzSyE0Y66FtBGmNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMzAwMzA5MTNaFw0x ODA0MzAwMzA5MTNaMBgxFjAUBgNVBAMTDXdpbnRlay1tZWQuaXQwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQD4aN6msrG5tp4/XwY6QmaXD4tymUkYVXuO GzMkQVU2o/mpYiam7zBEngJCNl+3bqe/JNRzlznutm4kijhbM5rgNVxcpeROzjFJ 03YZKrpJzsi/gWewgNI8uqnxgecBQqhnmX3xz/hcWMLDqTx1No8IyPvWcJJZnHEe o3+htleCaCg4zYtruLnE9Rurl2cvJxbq5zW617E27zZb2CpJGBvjgkl96WJfVAiL EFk5cAQ7Jhbqiq8N35Oe2D2a7Ssxc6TunykywAAyj29cWsvjaC1ltgC80DzjOvyy NGk1vH78A9r2ehLH7/BBwJu/T6xDCJMknry7HNZ3B+PRQqf3QVo8jPrD597gwXAz YZreWDpIKjlOo0aljqmQwFZocyJqkdVyr23hDR4J+6h6m9d1IzK7xoemTbdqcp5v mn9GkboHCZrkLLg3JY7C9oHkUY8KNoAMWv2197cSa3obZBxzt9AYOIrTw9FnB4t3 vbM3b4q/M5Pk4pevnyjK5JuHRJkPZvM9KK7ZOhh99ZohUZSDqsP0vnjHUq23aNMf q5XXqzgMh6IUczpixnzW4jMUr/Ft5l4euAMLDLgKAMH4GAVAnx5buhplpzA3VwVU b2cQtCz+Cz2kjE6/+CPGdzFsjen/fbiGSwTnTjgPA8L6jAJH5shPTdyUG9WJrZoJ HehMie9xcQIDAQABo4ICIDCCAhwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBToW2L4 zUl7LnDQlbkgLFmVDjdDrjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXdpbnRlay1tZWQuaXSCEXd3 dy53aW50ZWstbWVkLml0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBADo8PL50gxNaUrX+kruHd7VtbKAJbfaNlRLO8+zk48vypb9Qddpnum3f3G0v YBKCPrKMpLhzl4gbxdLZnQu6AwO2oDmsYaVEhW8XErsI08obN9RH8p0oyV/GT9js MT4m6YIsN8Ie9hnsUdDbpX7gDVCyqNx83wNlHdJ495ACtXz8AFqJOzKkH2/sOu9+ +56EoET1uxouIjryuj9YzUMf+CNXWnS+3ct5RxE1hOk8eEdbphXpMQHYS6vX2bfm H5kV+XnXtoijK+qaHS/VPhP/cxGQgOj5kTvMZy0mM23wAj0RtzVnVE2rG2Xw4cwN jQZXlupzDvsDZkyRgPkpZFoFrqw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+GjeprKxubaeP18GOkJm lw+LcplJGFV7jhszJEFVNqP5qWImpu8wRJ4CQjZft26nvyTUc5c57rZuJIo4WzOa 4DVcXKXkTs4xSdN2GSq6Sc7Iv4FnsIDSPLqp8YHnAUKoZ5l98c/4XFjCw6k8dTaP CMj71nCSWZxxHqN/obZXgmgoOM2La7i5xPUbq5dnLycW6uc1utexNu82W9gqSRgb 44JJfeliX1QIixBZOXAEOyYW6oqvDd+Tntg9mu0rMXOk7p8pMsAAMo9vXFrL42gt ZbYAvNA84zr8sjRpNbx+/APa9noSx+/wQcCbv0+sQwiTJJ68uxzWdwfj0UKn90Fa PIz6w+fe4MFwM2Ga3lg6SCo5TqNGpY6pkMBWaHMiapHVcq9t4Q0eCfuoepvXdSMy u8aHpk23anKeb5p/RpG6Bwma5Cy4NyWOwvaB5FGPCjaADFr9tfe3Emt6G2Qcc7fQ GDiK08PRZweLd72zN2+KvzOT5OKXr58oyuSbh0SZD2bzPSiu2ToYffWaIVGUg6rD 9L54x1Ktt2jTH6uV16s4DIeiFHM6YsZ81uIzFK/xbeZeHrgDCwy4CgDB+BgFQJ8e W7oaZacwN1cFVG9nELQs/gs9pIxOv/gjxncxbI3p/324hksE5044DwPC+owCR+bI T03clBvVia2aCR3oTInvcXECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286927097157010246058601646175201112910221 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 03:09:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 03:09:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wintek-med.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1013422944401951416062812883651977102745598661060651101326994026703081951808505435442263049579876298576077948925790120795636828993408950792476916456807017398910539993953094598718539138017796569023052675412831734232540127488063526910024998800213097390922324903125132047198996720780272711581278529904685718598694925077780232038362806537922806909936630506567206589152482665706191818162535937367511139117432193230533982996301381861058449748178167068849294364246293118323787987777325801657021414715556588465686801009655768178305720667612981182574253294679749968830425067301719789988537174710272830603925053824250700432748196339302362439189088562202602402687428822933013494467543737337653675231756776305281763970905258631197370485606927576643530872288308137576918796580915084209449246467950700114991898229031459254383475453142061149065449011699664666813542999697950714101797932214575491125205653380696012068584639572210595323630245538934766832503828965742797269277543015669397553332410639768635019078568381350241615916340555560411628403917910140711100044414880368781907988920655606489504811139190300110019474803573863526123909599925943237529803104076808205377295423790551582241235707368474039131027281764684947112377480563054739287924765041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e85b62f8cd497b2e70d095b9202c59950e3743ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintek-med.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wintek-med.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003a3c3cbe7483135a52b5fe92bb8777b56d6ca0096df68d9512cef3ece4e3cbf2a5bf5075da67ba6ddfdc6d2f6012823eb28ca4b87397881bc5d2d99d0bba0303b6a039ac61a544856f1712bb08d3ca1b37d447f29d28c95fc64fd8ec313e26e9822c37c21ef619ec51d0dba57ee00d50b2a8dc7cdf03651dd278f79002b57cfc005a893b32a41f6fec3aef7efb9e84a044f5bb1a2e223af2ba3f58cd431ff823575a74beddcb7947113584e93c78475ba615e93101d84babd7d9b7e61f9915f979d7b688a32bea9a1d2fd53e13ff73119080e8f9913bcc672d26336df0023d11b73567544dab1b65f0e1cc0d8d065796ea730efb03664c9180f929645a05aeac