radiotelemagia.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d9:8d:be:5f:8c:ff:13:51:04:84:1c:71:65:fe:d7:d4:d0 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=radiotelemagia.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d9:8d:be:5f:8c:ff:13:51:04:84:1c:71:65:fe:d7:d4:d0Serial Number (int): 335366541038932978395348550815789268587728
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 21:30:5e:8e:20:b6:0a:ad:01:02:cc:49:4b:ba:e9:5a:3c:0f:22:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:48:dc:05:13:06:6a:a5:2d:42:65:a5:2e:bd:dc:c8:36:99:3b:c6
Fingerprint (sha256): 94:ba:a5:32:a6:0a:38:6e:b9:65:8c:4f:bd:82:bc:9d:8c:4c:3c:87:d8:f2:27:8d:7d:a4:c0:a2:d5:bd:07:8c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate radiotelemagia.it
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for radiotelemagia.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.radiotelemagia.it
cpanel.radiotelemagia.it
mail.radiotelemagia.it
radiotelemagia.it
webdisk.radiotelemagia.it
webmail.radiotelemagia.it
www.radiotelemagia.it
cpanel.radiotelemagia.it
mail.radiotelemagia.it
radiotelemagia.it
webdisk.radiotelemagia.it
webmail.radiotelemagia.it
www.radiotelemagia.it
Other certificates including the domain name radiotelemagia.it
(limited to 100 certificates)
mail.radiotelemagia.eu
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.eu
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.eu
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
*.radiotelemagia.com
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.eu
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.eu
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
radiotelemagia.it
*.radiotelemagia.com
radiotelemagia.it
Certificate
The complete raw certificate details for radiotelemagia.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISA9mNvl+M/xNRBIQccWX+19TQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDYyMTQ2NThaFw0y MDAxMDQyMTQ2NThaMBwxGjAYBgNVBAMTEXJhZGlvdGVsZW1hZ2lhLml0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIWM8U4ZVUnfjCTc6YlZl4XDMSbj iFdBcmhCCMN74mM44wn/MLhBxPjTpRNLVXl/obMNQG7wmZjgxuGO291pRAIw7Ifg zsUysRUp/PZjaUiYmoLBl8SAqNOAuxdLuhpFKRTCYyRlyx9FR4Fm1DDf1i4CgRwP /U4RIUp/dvgIVRc7qbCzfWrGDTq1tLU46/ZzKZrSKcT8qZ9777fUfOmEX0MC19sH g5q/EMazrKnQgFsyWt9eeuPA7MurTMRtWi2v7o+Yk7v48Bs2SwhUMZNnv/YhQ+ZA OUZBi+C4LXgkbUoLrWBztzkyq8SOhy1GuCh9uOJXx/LCg1QLjpngrGy9AQIDAQAB o4IDCjCCAwYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQhMF6OILYKrQECzElLuula PA8iaDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIG9BgNVHREEgbUwgbKCHmF1dG9kaXNjb3Zlci5yYWRpb3RlbGVtYWdp YS5pdIIYY3BhbmVsLnJhZGlvdGVsZW1hZ2lhLml0ghZtYWlsLnJhZGlvdGVsZW1h Z2lhLml0ghFyYWRpb3RlbGVtYWdpYS5pdIIZd2ViZGlzay5yYWRpb3RlbGVtYWdp YS5pdIIZd2VibWFpbC5yYWRpb3RlbGVtYWdpYS5pdIIVd3d3LnJhZGlvdGVsZW1h Z2lhLml0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHW eQIEAgSB9wSB9ADyAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFto0EjRwAABAMASDBGAiEAzF+taGjAA3WCNxlL5D3L1yPUTkk32tufKuvh6pT9 280CIQDw26ZYlc8uMxuAm6ejHdMsSn4pXTmK1WjVaq/cU6TjJAB3ALIeBcyLos2K IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbaNBI2kAAAQDAEgwRgIhALbovX1R JVY0nmlFkwV5xP2o742dmql2tDCZQhxj0EjtAiEAmR40nSn1nzHkcG+XNpgW8i1H S2JVR83ss+jbEqghEZwwDQYJKoZIhvcNAQELBQADggEBAGcwXiXSMUT/aQmSesgu tXlF+R+EANQWguexMILwBktdZaElgZx6Mpqdqcic0SZ4/xM/pnDCTpEFImcQ9k96 GAD9YxGuvO6Z/tnJJyd8IorzydzfSHddhQxKXveat4G3AuRD3Nn0kZ3MzP6HRU3H sUJk3dEi2oo5pLDInIlCX19BtcXG3TIhYnN/u77MI9breeMJPW8VomRe9F2+fY+R khluq/feRBkvyEUNIl+sNweVId1RfYxXmYUX2YiiQZZujdJ0pAYIJahyPtFMtuNP /9yh+T2bfrVwVQJUtW7r5GtRNciM88zVPaXdmAj1I/cidiGayPLD3a0WR94MQv+a 8/w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIWM8U4ZVUnfjCTc6YlZ l4XDMSbjiFdBcmhCCMN74mM44wn/MLhBxPjTpRNLVXl/obMNQG7wmZjgxuGO291p RAIw7IfgzsUysRUp/PZjaUiYmoLBl8SAqNOAuxdLuhpFKRTCYyRlyx9FR4Fm1DDf 1i4CgRwP/U4RIUp/dvgIVRc7qbCzfWrGDTq1tLU46/ZzKZrSKcT8qZ9777fUfOmE X0MC19sHg5q/EMazrKnQgFsyWt9eeuPA7MurTMRtWi2v7o+Yk7v48Bs2SwhUMZNn v/YhQ+ZAOUZBi+C4LXgkbUoLrWBztzkyq8SOhy1GuCh9uOJXx/LCg1QLjpngrGy9 AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335366541038932978395348550815789268587728 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 21:46:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 21:46:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radiotelemagia.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20263985028732992221813042886667473447745336058515572038483361669365906381972306310149414694344724236366392443212947746414639571980882905552001291659782257960205612093355126509483519670269698588722432519761591255235207382857413316848218484141823084489418462993101130390325660409173857012033431649158467881598756811454044350796993933993641492194420069802484199723727227396321934003247262555108597328142350461370486781547914471061010460496354610363429229508671356708238623934097455337781719623365447456916650943596551658568531116411919752608062854543413216487723531612695238528354188637214178097428199821456761594625281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21305e8e20b60aad0102cc494bbae95a3c0f2268 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.radiotelemagia.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiotelemagia.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016da34123470000040300483046022100cc5fad6868c003758237194be43dcbd723d44e4937dadb9f2aebe1ea94fddbcd022100f0dba65895cf2e331b809ba7a31dd32c4a7e295d398ad568d56aafdc53a4e324007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da34123690000040300483046022100b6e8bd7d512556349e6945930579c4fda8ef8d9d9aa976b43099421c63d048ed022100991e349d29f59f31e4706f97369816f22d474b625547cdecb3e8db12a821119c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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