lavoroagricolo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:81:a6:bd:b7:3e:3a:26:4f:c9:0c:b7:c4:6e:8a:8b:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lavoroagricolo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:81:a6:bd:b7:3e:3a:26:4f:c9:0c:b7:c4:6e:8a:8b:2f
Serial Number (int): 336031032331594461566845915943749357833007
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:ad:fe:43:cd:0c:7c:bf:30:ad:48:c9:b9:c3:01:dd:c1:b6:21:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:d6:0e:1e:d0:26:f4:7f:ae:1a:ad:3d:14:ef:32:49:17:37:86:74
Fingerprint (sha256): 8f:d4:3a:58:63:d3:cb:a8:3a:a7:aa:8e:7b:fb:3f:f1:61:a4:4a:ae:b6:e1:93:10:b1:d4:b7:04:95:86:c6:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lavoroagricolo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lavoroagricolo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lavoroagricolo.com

Other certificates including the domain name lavoroagricolo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lavoroagricolo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxiCL58ZhroyqnjOuSdkk
cDfcOw0yStHO8UKfmI+mAo3Ob+em+2mODUWAwXkUtdKa+mQ4S4qY2SvltctoE0ov
OiMInF0Yn3vRbmJubm3RbrVVTphEoxbXwoKqQ3CQbV35w9qu2t8noMQpoXKCcqGo
l+x8cs59iot5uU79kYpPRxhdioP45h991Mwh2cUrXIVJMc1sTGLXVpzbyvLlZhrh
m4ElIzHhiSsai/+YmDh2QUGq/1dGX68vGX9GFs3ZO1hye2dH0DgMr++bA0kIAbYp
oODVmeRA0tZtGS4aX1ucUltTkm0IwCy5l1QuUYJnGYKz6XcljQElzxAxhH6VBtB/
SmkJr0VsbOKJF1rIVr1dSvIe2xXCeuwb2rkkK+CS/NwUArMePch2R/9mIU8d0fGq
vt+s8Tf1nFEbjly7K8AVXOtzC5m9e3pnBd81PaBDiLZ2CDaiOMZy122vWyPifc2s
igRFH2I7iimRQPRJOv6qNlmV57bSwcw9Q+S4AsESwcKCmn8WdBEpIC6Q4WVSrGYZ
Bg5gEaVX3hoW6ioETkZoaTkq4M4GsNSjV7x/Y+seQaUm4OwYn1qJrKfBaoUk42Kb
KDqsSWKLEUUnk14ubKcxeMhD7W0RX9G+ln1GVHRURg5kFgW4DP05TeWlNs2A7Mw9
OL+tH7xLAHSI0j0ED0Jb7D0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336031032331594461566845915943749357833007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 10:46:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 10:46:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lavoroagricolo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808288190145739969098018708904945177767305264580156996590241610871977539216107865461435983002273653907243125527312778403227819811865399674041368223415227892025670100171706437431836194721548996697087254144507514526772886310196523166703006318247817546217653906773744832499257336659662895524443222458793179273254210735397355945900696234870739943995373397244771978850437976045876426312999784859112207698604861390336719606987089232727743589591857283167528327158547877969191808608769745093456892126588330963194674536905476423157679907202556910731832397750734667146163723150445997798858664144341701856996424946473832067491354639843645855286394926847195905074638622536329330458574373975442299561901808203798941998421708251201289765798145213776776384247375875198460253170574247466494249853416991063367766807841539851244257955405294224807882916620760218339533071838838297696175304018520916740203255590282702075821365074725392501577547586826128185765078923880052239934601263536576155623740139991327413662905071721153904068970235479912798646708802201261223067455198689535021777020406957235418694142362425593543207854200292924960454617663897999177375128420504274639006258904775304260970879419495283109664317586484755840822493241146952074055642173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60adfe43cd0c7cbf30ad48c9b9c301ddc1b62169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoroagricolo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db57e50c5000004030047304502205f0e5b5d1e0289d310974c0d7cff9610be3d2941c3b79ffbe3e0b84a9fc67d66022100aa05da6a919a8f6675be6d7be4d6f4d1989ed6ae5a91e2a491cdf21da2390f83007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db57e50b300000403004630440220290de419cc92dc08d24e54b3fc8fc8d52d66e908becd402614de842134dff3b3022053a934975f5d92789281886db215c4d4a026c292c446556df2ddde780b9794f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a0d4d31e7a74db440998c0b1e6bdd131345351d645fe8b6f2d93fa4ad40f2c8d70b86119958f697a4d5809199a0c0a63e218fba466b871b08c03a2a168701a88e016c0157df60e692ec1f0f6acb567c07de34b22c523cf84cb1d9ca7cf7c793ba08199a67f00afff5ab376417efc069a03a4b8c55577339de4b6fe0c7539b7c32536d61a7ca2376f14b7194e1262d56abcbeec15e5c4bfbd4d57ad0f024db92d2e6adfad8f1c83c09b5a0d7d851bc57422d560e96507b2be7acdf1bc9fa74052f831e5df7e25e8ca71f656df3aa042a61a8b1a53b2e7962ba904c6d0f78dddae0a22cd77f468d24dc16b11966406c335648282b87d721b9e5c22f3c9dc25093