www.salvagenti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:d6:87:f4:a2:4e:58:78:45:12:96:36:7a:82:2b:75:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.salvagenti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:d6:87:f4:a2:4e:58:78:45:12:96:36:7a:82:2b:75:9e
Serial Number (int): 301775337804892505229595908251744786412958
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:e4:35:47:1c:d6:7e:4e:6e:57:12:7f:18:5b:5b:0d:df:95:6d:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:71:1e:3e:9d:04:ef:43:f9:a0:2c:7f:15:39:fb:90:6b:45:22:7c
Fingerprint (sha256): 8a:f8:4a:9a:37:6f:27:a5:5b:65:aa:82:d2:b7:f4:a4:1e:90:46:69:71:c2:77:06:c8:e5:26:29:89:b6:7d:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.salvagenti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.salvagenti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.salvagenti.com

Other certificates including the domain name salvagenti.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.salvagenti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301775337804892505229595908251744786412958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 04:01:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 04:01:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.salvagenti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907377762814869768051979996231497600245091088307722972237944509720722799432699264558368183773639235288326244914050331988999161393966585911490928886247018702854614771750391363042348766528245207246653034190679431909668379931164038522850003554894461385385642038973835360785032376416955478311869971661871495763163443932234632614975241344599743568961724648753606674689207578841995013717477762688038385592236082210304914926135938983277512283420156446999135436725417372345796004348079060887472765435877151321577236999387881978302281858737416513594956751227480412003543575856450358148198773719704292255594007449707815292581739323711335993626859280391288753323202791787371941071070519916634402497031939404441871217757895250388176805482964652969276115165277713122084216529172030446242537194321682268419438305141761107162221459034227395554425162579130364047509222977642611529214540690439812420077596860285436658921865878167637379337405943238215011117818410148612576781575642699196631790843411909361391190580641898479332727628831269254151185856060317981890978994427807123562445941250670774618898928528857629413903192387685675641800671662757753586977270415443697498053275150749430159152619153000181116777942252945880333310102734792206180552113249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29e435471cd67e4e6e57127f185b5b0ddf956ddc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvagenti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017018e015e90000040300463044022017d5917adaab25a7107a094c3e73f641239b9401d262df4b7bb943033afa867d0220581b95f5f6f9a97100cef7211a1e4832a05e0cbd67b7c18b361fbb0c2c5fa34500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017018e016140000040300483046022100d52bef7d6099d792cf5c1f759c5f375900166a72c1e769e81d8383272320caf5022100f419ba82fcd8ddba1d56d8cdc3db6556b87d409726663ccfaeebcaa10662f870
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a557fca9d96c3d3e4a28c841632be1fffa99ef58990066ec62e698df3c3d8433ff56b65560b2edf36dfd51373e0ba91f1623a2e1c2ecb640f5b1e01f874dd62b8916c16cb4ae03e36c57043ea37123fb73175564265e7d8fcf3cd9f234ec0f1b2d2b39bff5cae926abf99659f87515a3a15844ebcdf3637e6c2f18f99cc3ea390beceb8a0c32d6bc69704399c978153e98af7eb254834d9f8410acb18e052c608cde0d492e3e2e1213e97d0341a8925163aa700f88b0807b9343f47f62a93caff2129a99215ee739f972a8d8c74f88c912a6b6de5f8f6862685ec89c3e6990b8003cb072d9fccd59a1113f52d8e4255783c6f4ed10a60eea23d3fdafebb7e7d