www.pontedilegnotonale.com

Issued by R3

About this certificate

This digital certificate with serial number 03:36:1d:75:b6:32:29:a7:3c:8e:5c:85:b5:44:f4:d6:0e:bf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pontedilegnotonale.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:1d:75:b6:32:29:a7:3c:8e:5c:85:b5:44:f4:d6:0e:bf
Serial Number (int): 279751264414994475154340554175475573198527
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:d8:fc:1a:92:27:ab:14:67:35:54:73:33:f4:37:1d:e5:1f:76:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:f3:24:b4:e8:62:0b:7b:31:4d:19:da:16:8d:10:b8:66:2c:8f:7d
Fingerprint (sha256): 8c:79:c2:ef:b0:dc:2a:52:dc:b4:52:6e:20:01:9b:a9:4e:5f:d7:93:b3:57:8b:fa:9b:c8:59:23:c5:d9:0c:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pontedilegnotonale.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pontedilegnotonale.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pontedilegnotonale.com
www.pontedilegnotonale.com

Other certificates including the domain name pontedilegnotonale.com

(limited to 100 certificates)
www.sheerba.com
asuulga.mn
pontedilegnotonale.com
www.pontedilegnotonale.com
www.pontedilegnotonale.com
cevremde.com
www.fribio.com
pontedilegnotonale.com
www.pontedilegnotonale.com
www.codekoatl.dev
www.pontedilegnotonale.com
shop.pontedilegnotonale.com
www.pontedilegnotonale.com
jinselect.com
pontedilegnotonale.com
app.ubin.com.br
pontedilegnotonale.com
www.pontedilegnotonale.com
pontedilegnotonale.com
www.pontedilegnotonale.com
app.pontedilegnotonale.com
shop.pontedilegnotonale.com
dashboard.adahodlers.io
www.pontedilegnotonale.com
sdash.app
thanjavur.yazhdroptaxi.com
app.pontedilegnotonale.com
thanjavur.yazhdroptaxi.com
innovativeinfotek.com
app.pontedilegnotonale.com
www.sundaycreativehouse.com
pontedilegnotonale.com
www.pontedilegnotonale.com
www.pontedilegnotonale.com
app.pontedilegnotonale.com
app.pontedilegnotonale.com
www.pontedilegnotonale.com
www.pontedilegnotonale.com
app.pontedilegnotonale.com
curlaid.net
www.pontedilegnotonale.com
docs.latd.ai
www.pontedilegnotonale.com
app.pontedilegnotonale.com
www.pontedilegnotonale.com
app.pontedilegnotonale.com
dashboard.futuralabs.io
fxch.jp
www.spit.me
portugal.careoncare.com.br
meridia.hu
www.pontedilegnotonale.com
plotpal.club
www.qr.linkitcode.com
www.pontedilegnotonale.com
www.shandellejensen.com
devutk.com
colytix.com
app.pontedilegnotonale.com
www.xapps.com.br
peakok.co
next.marketlinter.com
www.pontedilegnotonale.com
www.pontedilegnotonale.com
pontedilegnotonale.com
www.pontedilegnotonale.com
myresourcesite.propelledbrands.com
www.edmundkorley.net
pontedilegnotonale.com
pontedilegnotonale.com
pontedilegnotonale.com
www.pontedilegnotonale.com
stage.projectcedar.pwc.com
plotpal.club
www.pontedilegnotonale.com
nxt-fintech.com
pontedilegnotonale.com
www.pontedilegnotonale.com
www.artist24.com

Certificate

The complete raw certificate details for www.pontedilegnotonale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279751264414994475154340554175475573198527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 07:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 07:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pontedilegnotonale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4363805351043309965698081459216874290259298300093865307468553096392442235748465249302177690316659305270676198358238724339242960877354350096380200934413998084681239131988543885644604195328206816218805013114120477366961728877347996526802158333445488421338396341261579547136464970121150850019221108842002778939054348586559587077749692440200900927898060536155766378728534503234787879003987852869851002654013819808754008144005721184178785346390874266874087119930842223269581410489457996890229540939166977342295493559895248883428777120807912900006047165556495490585466584687364175327036820280608965619379185437156535042555571493098751105832002784104960813829593075384562609386899534336776428966452455070853778187474658153921179082587900791909847910275017412220882205839250812300722157313177925529658373922604157269343841417354138402886646647857043349133934420565098780287479982263659478706649322660611053656908738391429017149755753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63d8fc1a9227ab146735547333f4371de51f760f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontedilegnotonale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pontedilegnotonale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188d7fccbbb0000040300473045022022202692857fb9004218b22e4ca378654e209de8018cc970acd2743b9f6ffd41022100f9171a7550e942c49dfca636e866f6b432ecaeeff7fae1e5209a406deb628ef6007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188d7fccbb6000004030047304502200f910930de2aa4c4126ab7902e6fd0ebba1336bb1184b7013c426654376b1b6f022100c9fb5bcbf3c6347546a7687a0adf344fbb216d4bc455f98b50aebb59f18cf712
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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