romanodilombardia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:f8:58:86:1c:30:62:0d:5f:46:89:96:d7:f1:62:76:64 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=romanodilombardia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:f8:58:86:1c:30:62:0d:5f:46:89:96:d7:f1:62:76:64
Serial Number (int): 277660237225719307182035032673842874185316
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:d7:79:70:5c:95:15:34:84:83:75:61:9f:9a:9d:7f:b2:a6:9c:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:d4:b8:a8:e7:b1:8c:2b:ac:62:1f:b3:b0:94:76:e7:b5:ff:1f:09
Fingerprint (sha256): 95:cb:8e:d8:2d:fa:7d:90:8d:87:9f:84:50:d0:ce:40:31:ae:ac:a2:84:1f:c9:8f:62:fa:9d:57:34:7a:d2:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate romanodilombardia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for romanodilombardia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

romanodilombardia.org

Other certificates including the domain name romanodilombardia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for romanodilombardia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277660237225719307182035032673842874185316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 07:41:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 07:41:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romanodilombardia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718847273236076963584934892227255211942601450433116791710088056544568685640260607885808626016883299369241602323692407422142524690678893180490695327981182371289107800212722289188769834336957828162345865884241521921602153067002285682771531320372652695019128714172315307973852751547533452660396465042776723778513625878904044978373787459915346629999530217739335195537338235210556751724796627652043387547225493035776622369909129581460734304237879486833068709662036010890189692186654954479567793310427196794909596101102533102115658631709263539287811601340958734359061071294841086995344915175604324441186251554240345919390918960432339811888867842580519558264693526987339476016042124225014738269568306952056632075327478761395276680045462642250678905133883143475108000660424511119415390195393543976505046009482423984770331243969091988493212702372214884159548752372838439591001040496374697928557272157998604217101978639946700670901659705336986048901782039804249322256193686851816575137229637959213482651815905247518875096351344449328489785128656890853251114027586681303098811801779406759363000931774211866299327373165560760736273211639773246850149989486858068737047575998361237165129518405698908823428014200602174047736442006702925331452651033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5d779705c951534848375619f9a9d7fb2a69cfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanodilombardia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7c2ed7340000040300483046022100bf84e5e8fd6f3a4b9bf07cad27395d26536a9c10277d3f1b2e584b670838068f022100d0aecbd1f7e3bdbfe96787022e3881f37ba043719ad112b10ea3646de8d089a500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7c2ed5420000040300473045022100d296f8bd510be8f96340ab778994af23150478e3f62dc1b29c90f2f3335c649b022046d4de7308a7f61475899c2010406441b7606e35a376eeace2f2bdc9482f8a15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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