castiglionedellago.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8c:97:c0:ec:64:f2:c1:ed:b9:e9:d5:c1:3c:a1:be:62:95 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=castiglionedellago.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8c:97:c0:ec:64:f2:c1:ed:b9:e9:d5:c1:3c:a1:be:62:95Serial Number (int): 309178104307219098339368254890200107213461
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 43:64:56:b4:ee:85:73:18:e7:8e:80:8c:1f:fe:cf:04:21:dc:4f:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bf:13:c9:c5:e0:6a:79:01:35:ba:f5:b9:1e:64:ba:d2:42:1f:0a:14
Fingerprint (sha256): 8a:9d:21:cb:ff:82:e7:be:3b:64:57:4d:03:c2:c0:c7:f1:39:54:b1:94:6d:0b:6f:9b:28:3c:ba:e0:35:4b:8d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate castiglionedellago.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for castiglionedellago.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
castiglionedellago.org
Other certificates including the domain name castiglionedellago.org
(limited to 100 certificates)
castiglionedellago.org
castiglionedellago.org
foodsupermarket.organic
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
www.castiglionedellago.org
www.castiglionedellago.org
entreprisesduquebec.ca
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
stated.org
www.xiaona.com
castiglionedellago.org
babyfood.organic
castiglionedellago.org
foodsupermarket.organic
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
www.castiglionedellago.org
www.castiglionedellago.org
entreprisesduquebec.ca
castiglionedellago.org
www.castiglionedellago.org
castiglionedellago.org
stated.org
www.xiaona.com
castiglionedellago.org
babyfood.organic
Certificate
The complete raw certificate details for castiglionedellago.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA4yXwOxk8sHtuenVwTyhvmKVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgxOTM3MDJaFw0x OTEwMjYxOTM3MDJaMCExHzAdBgNVBAMTFmNhc3RpZ2xpb25lZGVsbGFnby5vcmcw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDUHrTYFeziVUULn5TvaZb1 xtJ5wWj3zugYPif7Z5V0kmM0wxylZfdWQBaBDImsIBhUOf59POFQB7WKK+4b+2/R 4eadCsqPCI0DHox07whNnWoSTMXOKY7ET42K/0Vetq4W9H2d2QP0WlRDjLGnVpvv BE5bkgxrdzJHjIyZh3OuQFglmu+8KPRca7uVQguh0WddeM4ZuIKu0dXpFDe1d261 kPkgwXZC2ajeSE+GeU/l0az1Ow+y1x0N8q9IhdSv7EExT3e+0Ns76mM0VxjL3U5N kBXsgvz6qz/ZTp7+JcHrcWLiguf1uPydQNEaEtfEUvE6P4paY8lp6sTmPrbfAULl mTOPxPWn+7WPV0WqyyuEI+2jQgoW936gJC3sLlhRHmLpVJzQrtyrQhseRsiW+5vr Yh0vNEMZcD4nvRxOMVzrmutdKNjHiTWgefUdfZOc4IBUJCna3x4Ay4SvZ+aurDb6 XeqtoRbPp6xwaLYNTEnRg8qkYBNJ/LuBNztCLyd+GG9DSzj7pKdPoUDE+2VlCITh rfjlt2RlhlC7pZ+Q2jtSsdoHcoG0G9AugKoqit+rrAADYOIaS7d1U7lx4o4bWAV6 Kup33rlidpS8LUyDSWmf1MQInVNwbWym4QYH/YsM9EM8i0nO9+le+vJbP6U/zQv4 //RgNTGK4n93Sf/tDpyjxwIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRDZFa07oVzGOeOgIwf/s8EIdxPSDAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmNhc3RpZ2xp b25lZGVsbGFnby5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o kwGd3fHb/gAAAWw6TQXyAAAEAwBGMEQCIBAnj6sxoFk7aoDRx+uFj6hpY93EmkEA Nm6r0J9oRQVcAiA/JpI1KNaNZrXg6CBCjm4SmIrJ5OvljhKD+kQDeFYTgQB2ACk8 UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbDpNBhQAAAQDAEcwRQIg Of2cC6mJ06QPXsgmn95coP4PjB+Ac/ZiMnLv9wvsI0cCIQDKLyorLzJL531gUr4T WQuvsKfbfW2bV72LAvPRYppGKzANBgkqhkiG9w0BAQsFAAOCAQEAKIFRuW4ipl/K 2lNvNfzJusoqban7Vq9TMVLrPCGpe/x9hy16O+n+sv1NdNL8elD6ppbQ0Zi5yfEA yp5zgXV9uS7aIrGNggQYRT+o5MjFXuL1Wi3mxCuAL5TlxoRVMFOKp3SqOznmLGNQ +tDj0ARn0OBlfBT2KTtpcgLayIa2mYKit3Z/DK0k8Bchs5upAGagsbvdZ00mkQIe WBiwLZ6SSRPZTrMkmyRBzYi6g65u426J8r+xkw2i9C6yOxmYD4K5HfxtLcVZ2S3N JxFR+pRDj8ZXT1pUljCXqyLla9ZmITIvCOTZaaN7s6CEUoqUTqNFkI5PC0AI0Ct+ ge46Dh7QDA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1B602BXs4lVFC5+U72mW 9cbSecFo987oGD4n+2eVdJJjNMMcpWX3VkAWgQyJrCAYVDn+fTzhUAe1iivuG/tv 0eHmnQrKjwiNAx6MdO8ITZ1qEkzFzimOxE+Niv9FXrauFvR9ndkD9FpUQ4yxp1ab 7wROW5IMa3cyR4yMmYdzrkBYJZrvvCj0XGu7lUILodFnXXjOGbiCrtHV6RQ3tXdu tZD5IMF2Qtmo3khPhnlP5dGs9TsPstcdDfKvSIXUr+xBMU93vtDbO+pjNFcYy91O TZAV7IL8+qs/2U6e/iXB63Fi4oLn9bj8nUDRGhLXxFLxOj+KWmPJaerE5j623wFC 5Zkzj8T1p/u1j1dFqssrhCPto0IKFvd+oCQt7C5YUR5i6VSc0K7cq0IbHkbIlvub 62IdLzRDGXA+J70cTjFc65rrXSjYx4k1oHn1HX2TnOCAVCQp2t8eAMuEr2fmrqw2 +l3qraEWz6escGi2DUxJ0YPKpGATSfy7gTc7Qi8nfhhvQ0s4+6SnT6FAxPtlZQiE 4a345bdkZYZQu6WfkNo7UrHaB3KBtBvQLoCqKorfq6wAA2DiGku3dVO5ceKOG1gF eirqd965YnaUvC1Mg0lpn9TECJ1TcG1spuEGB/2LDPRDPItJzvfpXvryWz+lP80L +P/0YDUxiuJ/d0n/7Q6co8cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309178104307219098339368254890200107213461 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:37:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:37:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castiglionedellago.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865373883331204140119767406181312730023725625032068319093782165494717627164471308757111230843152496419733499375060130142047088797904012112529597371817089635550670679157408671500037018347907170940778903346484583847743044925655366774972387966791342826957587079061279276425875298927820218572594701961316942239987066852285997694638442045935729123599419269157460221602715325842858084406149559539037998072656417796827188579986319335156876714301030737956432013559198043604130145520914293588307696383579404473041108220061323465524237110810041547367694433752987150903972912645960878179192639574778488109686011902006450107698832418231003760644855231637867444019771697725030814176899893919047850211622956116220551182864447212883627194165799679542818548383714833681411710667169329788840714809645493018396494394067117196853115962688319632443740389529205399378541601934968607260307405580479500855384034203462992997587512751456440411321001654016903803512616059548891293885258738679393266799050603390041012205956971052907149322581972975208183757619260635959019804624251182186518689969939602345159550273233117004910323086902216889454478378246096631696800732027956419130590533091691595300059153464475849612646507175741199259362897105034709169222755271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 436456b4ee857318e78e808c1ffecf0421dc4f48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castiglionedellago.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3a4d05f20000040300463044022010278fab31a0593b6a80d1c7eb858fa86963ddc49a4100366eabd09f6845055c02203f26923528d68d66b5e0e820428e6e12988ac9e4ebe58e1283fa440378561381007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a4d06140000040300473045022039fd9c0ba989d3a40f5ec8269fde5ca0fe0f8c1f8073f6623272eff70bec2347022100ca2f2a2b2f324be77d6052be13590bafb0a7db7d6d9b57bd8b02f3d1629a462b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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