orietta.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:9b:50:64:31:62:38:8b:2f:8a:1a:b5:2a:43:6e:d2:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=orietta.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:9b:50:64:31:62:38:8b:2f:8a:1a:b5:2a:43:6e:d2:aa
Serial Number (int): 264265564485897130610549342629744304116394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:e0:0c:a1:92:fb:7c:4e:32:ea:f7:2a:d1:72:74:3e:db:1b:5c:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:86:10:c3:d9:a0:5f:ed:5e:2e:6f:d6:d1:f5:81:6e:8c:a9:ac:3b
Fingerprint (sha256): 92:a5:56:cd:64:84:2e:10:65:e4:05:8b:ec:3b:ea:56:cb:ec:7c:c8:ba:15:50:92:5d:d0:40:23:e1:d8:33:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate orietta.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orietta.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orietta.org

Other certificates including the domain name orietta.org

(limited to 100 certificates)
www.orietta.org
orietta.org
www.orietta.org
orietta.org
orietta.org
orietta.org
orietta.org
orietta.org
www.orietta.org
orietta.org
orietta.org
www.orietta.org
orietta.org
www.settimomilanese.org
www.orietta.org
orietta.org
www.orietta.org

Certificate

The complete raw certificate details for orietta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISAwibUGQxYjiLL4oatSpDbtKqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjUyMjAyMTdaFw0x
OTA5MjMyMjAyMTdaMBYxFDASBgNVBAMTC29yaWV0dGEub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAw1moxVJQTmfgRXmyoTn1tDnwqdUBJdrxWnSf
6anSSAo7gfpoNuTjpg/DkSiGhAx5cGZy1sr4oaehAZWv9HkstSMtMIpbn6t/ONsL
RLzQr36cCGKabfq4ijXWiChvmy3HLDAwhjU6KStD21BJWy3eVRBNVmeEF0fO4nZQ
/wzX7H2Ju7owVIFJ20H+Kr+ULqiepYjKtMXk8v1o36vwgq54Vqb5+OZGZANEGtim
HvtodwdJrG1cknIqYB7TRlON02uQOkOrb4BXrQLGfHBE+0RLZ9X2zi0RznuXkTJf
BGeMHeIPIPOXnXqiENIZWcc+/1r/kccZltNNNSMlPyZSUNmO4PVMOWwfK18/zC5M
Pif5G8G7EwYB2Mya1mCYw7q7VDJNGju0kGMR+P5eL+wAwo4WwXDPArEGF9ONOv1/
7goqaBwWGNSxb6YbZNBE4umpinD+8X0L3vcZS0za6Iyd+6pUfWbvrW2AuDpPw+XM
Yfm2SIkC0K1FrXZwJgceN44qsd8vM4mRdZKJfCL1VoTxTEmYxB3MTFSHlSu7XOWu
GJoV3N/zubJtOTVqF8SFuvx29WBSS2tTxIOG7sOOYutfs4wod/J0cPBbwX1n9I4m
ZJ52A6Or7sfNCUvobKoPwirgZHnO1W+9ImhLgXeAkrzsf87inPJ12vh/w+xq46wa
OfKeVmcCAwEAAaOCAmAwggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQURuAMoZL7
fE4y6vcq0XJ0PtsbXFowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtvcmlldHRhLm9yZzBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABa5DgJ4cAAAQDAEcw
RQIhAIIQGBzuc16X2aFXPsiPryBUpD0bn9NR+HqqW3e5cI+uAiA4Fqu0AgxZgrnC
1LxQRrDBPr76n6p4F9zB7GyVZWaKNQB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABa5DgJOgAAAQDAEcwRQIhAMwXA9Bz3DP19GRrumiFvk6WjySl
pjv1jwIavAnINdp2AiBP08c0l6RHvWcLXiaLUjyVHO3gmklNZaJjUqP50+pTyzAN
BgkqhkiG9w0BAQsFAAOCAQEAGz9UKv6hH8mvg8ITpsIJhm/gaUAh2GeCVuddOsSI
omnoyOEmKhWxar+C7WzaCq79Gkp2I+m64i32hKPldO6xf3J627Uhlm1QfWpbCGjz
oPKSJNrT5XCacC7Nt4GJWHOyJZAb1abbQ4qzlJHzrialC6ysdeR6NVXe5385WB72
ZDJch3HAribg0AwMO+CseS+pbibCd1f/gY3CbZO/AG8dUZRdJzm/ANZswEAtterS
/JxaFYMS4He1zQTPZAu3NPdlUjPqBnJlPXudZBSV6UsNyfgBtR/uyaX1HTnxnDXh
VRGE0+4+pyz4PguDW+Qu6M6IitSVuDEyaLwCksLbyuwmvA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264265564485897130610549342629744304116394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 22:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 22:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orietta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796959413075735979617364999321986980592240226475698481147462205052172401477191160833787688113328984012106363792743277694299577272073674308254804652695226585856461857854926545173483784868735215665232392019716227460886825517647303878606739774966974257351659076462665130121869325273829631588296120670870689975071729678306501124149655384144508817804974780067669645425961137146276782505234232751710784211988403656428089755208038269949996938873089887116178076434715401470595833629780076675395347888882655485400022860173796188848921778834052110264492470485270752089041417621156731421799620520897735427290826367426309422927694787218888648554858234107560073522408657567471505068639693042658955054391733656691083316583054668940013923997347149320281179350258431424617257050116815439352439448192270496220432831345922844403979444790334757063422551944684177435038309683775179639851707718232565187941692706713310396727213241728749297163107329300007437653962307205285855278929802511611094235908091285447567714819106089657553348693693986385919237934833898133470088723719439819704433555937014329976723268126427525428537780874925705297422749013920798941389665406271800848791770234013034756873774034145694722096477059917478494690345279978428306464593511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46e00ca192fb7c4e32eaf72ad172743edb1b5c5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orietta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b90e0278700000403004730450221008210181cee735e97d9a1573ec88faf2054a43d1b9fd351f87aaa5b77b9708fae02203816abb4020c5982b9c2d4bc5046b0c13ebefa9faa7817dcc1ec6c9565668a35007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b90e024e80000040300473045022100cc1703d073dc33f5f4646bba6885be4e968f24a5a63bf58f021abc09c835da7602204fd3c73497a447bd670b5e268b523c951cede09a494d65a26352a3f9d3ea53cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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