disegnodilegge.com

Issued by R3

About this certificate

This digital certificate with serial number 03:df:a9:19:a4:d4:02:5c:cb:9b:f7:4a:fd:20:ed:61:d1:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=disegnodilegge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:a9:19:a4:d4:02:5c:cb:9b:f7:4a:fd:20:ed:61:d1:5c
Serial Number (int): 337444598300471408050026189640836424257884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:96:85:ac:fa:04:46:cc:27:c2:13:5d:67:0b:a9:57:eb:84:17:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:a2:35:1f:47:d7:81:f6:0d:9b:0d:b7:b4:a6:4e:0c:b2:bc:8c:6b
Fingerprint (sha256): 8f:f7:f1:bf:27:bb:ec:cc:42:23:12:36:a2:00:02:41:7a:59:33:77:e3:cd:0d:1f:2d:43:94:6a:66:15:b2:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate disegnodilegge.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for disegnodilegge.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

disegnodilegge.com

Other certificates including the domain name disegnodilegge.com

(limited to 100 certificates)
www.disegnodilegge.com
disegnodilegge.com
www.disegnodilegge.com
workshop.software
kikai.bible
melanzane.com
disegnodilegge.com
villorba.org
www.disegnodilegge.com
www.disegnodilegge.com
www.condizionatore.com
disegnodilegge.com
jkook.com
disegnodilegge.com
lawpractice.link
www.disegnodilegge.com
disegnodilegge.com
www.disegnodilegge.com
disegnodilegge.com

Certificate

The complete raw certificate details for disegnodilegge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337444598300471408050026189640836424257884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 12:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 12:57:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'disegnodilegge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792374358966041139331453438162713652636608739904419543177991709719763670138167906866669046552647541220920492923399528181825533638100592072532926829724783062136763455729822050331295939687480240966981053876217796060901245255906450038374814091837499009234738379576379744786660265215460297216037250453509188442194582974891114137782977881190637481611489024308032373143714065524254574499996208729702571227068176412594550360503715085267283685447094102612778265336302650735170252768978359547615780080758334365094256893834263722152497525178512410039486219185188487700079395051646961237172949527506324494679729882298194129071504422543232171305398139873234479158763896467338201595170023353236807270095158182365049464636292919129922114087487124858866047162011239811319631622475419494175794263972974594471110203482813267703722713929869497288967169086389453088051818746593360199249816102561179040186330143829563684646921644740480780814296054672565594471873152529045645058288512798419947251376722500113382269483609747096848598282083037359988324934499986434191204765414313338516214420759355569938690618127937152525588590189852768970823203294682008422629625042497713198566924392789375125975714813916951741838136456591847940905494573326869077419461971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							029685acfa0446cc27c2135d670ba957eb8417f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disegnodilegge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d41fe258203a38ac4a9f64ea8fb96e9d9faad96aefedcf6c5f34fe15026790b57c0f1b5eaee0d42a023ed7112e1a3028d0c2e4c1d06afb73993ccaec2bbbf00d3b38e07ec1569db6af70bc140c2e0e84b67527cc08381a38a024229ae953b84d566c39324dba90f0d485bddeee94b58c41eec7b73882d85be286f39738c839ea6bd9a86c8cdc36d4e0716e812ea3acaf2b849767e419025bc4d799138abcde07562be228e8cba08e191750780a8a0f491d282b2305ffe43f3f258603a785c5604fd2d75494de0121f30e6af1e4c03c7c27e6de3d1e7f8fb144d94f8cbd02de5aacd6c5bd21e51bbc242a7d1bd21f5308df63281acd03accdf45e3bcc70eba19