www.contrattiazienda.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:75:53:3d:33:6d:c5:99:5b:3b:83:24:7c:c8:85:a9:8f:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.contrattiazienda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:53:3d:33:6d:c5:99:5b:3b:83:24:7c:c8:85:a9:8f:ba
Serial Number (int): 301260538421888972250731252015808222171066
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:30:35:a2:05:e4:fe:0a:88:55:38:99:e3:55:9f:48:d5:10:e3:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:eb:39:84:2d:b3:ba:e3:4e:a0:94:63:e2:15:ae:d5:d4:ab:64:b9
Fingerprint (sha256): 8a:19:1a:a7:5b:a7:e5:35:20:98:32:86:a5:23:aa:ab:f5:75:ca:99:7f:46:70:c8:e6:6e:10:0b:7e:a8:04:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.contrattiazienda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.contrattiazienda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.contrattiazienda.com

Other certificates including the domain name contrattiazienda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.contrattiazienda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgISA3VTPTNtxZlbO4MkfMiFqY+6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMwMjM5NTlaFw0y
MDA0MTIwMjM5NTlaMCMxITAfBgNVBAMTGHd3dy5jb250cmF0dGlhemllbmRhLmNv
bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL96hs+hNOTxVhzywkv2
nKxNuYe+qlu3VWK9fFDWnpWWrDkJkUmVAwdS/DsPvBrtvuLpMZ7HIoY+8pea1bBp
uECoXx6hTzWpPdeiPHgMAZs/eBb+6WW/zTdTi6xxcpf6WJol6vxnt9q+CX0LLEn5
HgMO0NQtHwezgfzdFvrXD5+fN9TnCVHrPLZIbhhdhN/IHNrIwWag20eaGmAuxoqU
dR/2r9k4+tkhDW7CEa0MNi07sQKM62drNXHcAEtcfcm0VyvyUFR5NpswPW4enZMm
k9Pr6bRZKw98uIEZLaJQONsGmV1YUDJeReQewkmjix/j/58dEdJajgm+asQrMeHO
sm71PdkX4GhQMBav6hwrEOETAGaaOgKYp/V9qQkdiUvQffnwp/3Lzi7YK0lapNPq
5lJIKUESVBHHkQAuECVyX1MUIF7GdaYu3ipphCeipRG3A0oxeMB6graIZUu8Y7Lr
Kv4GbXPkw84apEyQvY1gA5yGswKqAh8VwrRnltmnPYXuKgxvjwZOkQSdOoWBqDOk
/9QjuukMaLpZ9fLgOjNp+lnJnJe8T8ozzy0fPw7C6MB+K+lPbXM0zI5zoVGiqbiJ
GkhuFLp82n5gVOFgPvDBqn4jLrFxJ+37sF6Z3MU/sUVtKi95k7dAr/Bco53U75Fz
v6K6bJCPgb98cLwrmOL8r4IFAgMBAAGjggJuMIICajAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFB8wNaIF5P4KiFU4meNVn0jVEOOTMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LmNv
bnRyYXR0aWF6aWVuZGEuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyE
oRIShBh1loFxRVgAAAFvnPyhfgAABAMARzBFAiAcpcY0lH7Yfrh7h77SWnomDMb+
BYIca4XSAMX9lzNVnwIhAI+283Z8jm1TAJrdSxmS309FpgrCDfdteCIzJv/g9A3Y
AHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvnPyhaQAABAMA
SDBGAiEAp3XFuz498udiin04RUC1zBvLkMHGY5nuJ7IZSchXp/UCIQDcbvtO3ken
/TVFmlWKvFv0k7c9ZNUZVlTbzfPAzL+42TANBgkqhkiG9w0BAQsFAAOCAQEAkmEf
iNW+dy6XvaV86wQx5OFMsioEMBfhbJQecq1tSdih7uWNtoVyXr+AEq6r0nSh+1EG
d6mX36fDo9RAK7csJfpdID24VQOTfjvALbWK05/fdklL0UJ1DqBM8Z5A0+ByTw35
m63f2Tn3ntc2CNFUS2PyKCyvZbvzLt6glIUSLEKkqiUa6ATjHsdASo6trtwqAZre
rlsJBsJtGGs1CvpmP1nDO2+sMYTkbKTm269gN22MFcU5QZibIEaXLiUeSGKjfIHN
ovf9WmlqpUy6acUPwWCvAVS7P2u0ar/lJeQUiAea3svuFauOJGExzcurkjxyz4Ad
ySigHfhtG9F6lMSUBg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301260538421888972250731252015808222171066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 02:39:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 02:39:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.contrattiazienda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781164614413832106515369579040578370267835078350525767247398910169186439165044420549875568929276905462072043801989414080103458074949653022166450385407585904080982137220138381383812873758275260144410554583121908616184458401525727061023741602608684403761669327803218472401359212467853512353080499632329328863047429419275435219479955036444679377519434063739810769968272251912234559745181252539928309955179870441321626407141896813142722247654904913969156512214303042791049401225379004319228621797557825621036079931097141956321370540504153574584646108906028891166063494665476056554907846570741055224614477617314522802003069337227845848266381487993031217429366192044477526773650369256084649596969112236036120392235756971722603128264070559810978387342871073890322203873988183000037887395463507930390581932310310771708009286099580412877890873466330941763880629022594998898064031620805008551837215857036487057839682212785452169564396530118914781911375063440656001110616926175389485102992446201877826408710118121379914843636078134823364094069371747219408640617257286553339643425580592975408924142005308113849024772197491347071086198892516053850130635517743546341593819681021395751175831593118002775838369348469421589289718500381487481542902277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f3035a205e4fe0a88553899e3559f48d510e393
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrattiazienda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f9cfca17e000004030047304502201ca5c634947ed87eb87b87bed25a7a260cc6fe05821c6b85d200c5fd9733559f0221008fb6f3767c8e6d53009add4b1992df4f45a60ac20df76d78223326ffe0f40dd8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f9cfca1690000040300483046022100a775c5bb3e3df2e7628a7d384540b5cc1bcb90c1c66399ee27b21949c857a7f5022100dc6efb4ede47a7fd35459a558abc5bf493b73d64d5195654dbcdf3c0ccbfb8d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0092611f88d5be772e97bda57ceb0431e4e14cb22a043017e16c941e72ad6d49d8a1eee58db685725ebf8012aeabd274a1fb510677a997dfa7c3a3d4402bb72c25fa5d203db85503937e3bc02db58ad39fdf76494bd142750ea04cf19e40d3e0724f0df99baddfd939f79ed73608d1544b63f2282caf65bbf32edea09485122c42a4aa251ae804e31ec7404a8eadaedc2a019adeae5b0906c26d186b350afa663f59c33b6fac3184e46ca4e6dbaf60376d8c15c53941989b2046972e251e4862a37c81cda2f7fd5a696aa54cba69c50fc160af0154bb3f6bb46abfe525e41488079adecbee15ab8e246131cdcbab923c72cf801dc928a01df86d1bd17a94c49406