castelguelfo.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a0:e9:4c:f4:d7:e0:c9:63:50:3a:ba:b8:8f:69:12:d5:0c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=castelguelfo.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:e9:4c:f4:d7:e0:c9:63:50:3a:ba:b8:8f:69:12:d5:0cSerial Number (int): 316092146206221594476156384148764562216204
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 84:69:96:1c:75:76:c8:c2:59:fd:fe:fb:9a:1e:b1:aa:c3:6b:83:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 95:69:30:dc:ba:0e:b8:c6:16:b1:b6:23:c8:d4:b3:bb:af:02:d2:f6
Fingerprint (sha256): 97:a4:83:ca:ab:5b:b8:9e:cc:30:03:08:2b:b3:62:89:89:f3:1d:78:07:86:bc:15:fd:99:24:c7:28:92:7f:35
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate castelguelfo.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for castelguelfo.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
castelguelfo.org
Other certificates including the domain name castelguelfo.org
(limited to 100 certificates)
castelguelfo.org
plant-basedprotein.ca
hoopladigital.me
www.castelguelfo.org
castelguelfo.org
castelguelfo.org
www.castelguelfo.org
www.castelguelfo.org
castelguelfo.org
ezineriches.com
castelguelfo.org
www.castelguelfo.org
lawncare.organic
castelguelfo.org
castelguelfo.org
castelguelfo.org
castelguelfo.org
www.castelguelfo.org
castelguelfo.org
plant-basedprotein.ca
hoopladigital.me
www.castelguelfo.org
castelguelfo.org
castelguelfo.org
www.castelguelfo.org
www.castelguelfo.org
castelguelfo.org
ezineriches.com
castelguelfo.org
www.castelguelfo.org
lawncare.organic
castelguelfo.org
castelguelfo.org
castelguelfo.org
castelguelfo.org
www.castelguelfo.org
castelguelfo.org
Certificate
The complete raw certificate details for castelguelfo.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISA6DpTPTX4MljUDq6uI9pEtUMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQwMDA2MDhaFw0y MDA1MDQwMDA2MDhaMBsxGTAXBgNVBAMTEGNhc3RlbGd1ZWxmby5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDUP42nUt8GeZcnZoq3Ho7yeCZjHIRU 1Zye7wUEetjRvP+JueEPs/dPQVYaV51ZcKuS076utwbYKRkxXrtJNkzGg3dgrco/ 95NQpl8GFv/eBzHX78wJIIeQpvXeb2V68O46WIut7lWyXrOPDih0dsDywiPH7Mrm tUlMGRVEhmNAc+K/a4Y/hJJVoULSNSMb0vMzZuVF7v2Mmu2NoRR9AfK7QAjc9iLu SPXBC5oM2q6xRftC9t/14z4+kDolc2fBknJJ6uvob6mP9+MI2pGlLYRQNcGo3oYG +LfvP2uvJQhoiXM3Nsdb2Rlieejtw04KeoQDNziZCCdufjP/1vZRdTU/WLTEbdFz QBgF0YgpP3NkNfVMFkYUMkB55SiE4VD6TT34Vx0dPBFpyQoUGIAqe/mk/OUM611D URCiMKkXHOu5wNFz9tDu/1V+gWVz/YEe6HrR1Fnke8y9OOsRalQZAelsHlTsM/gC D0sIY9yobvEIt8SkVwlzrviU7P4OIi96hkEmMxdooRQcYFaCl1pbC3v1iCfb7ugk K9IPrKipSDGSLxwNgQfYADwR2rfTw5u5tNqOcFmRDzQdUR8oCWhxKMJrh0/vHklU pRNhB+ZONrF0gtoQCZnGhEtGq1SXWh13kCxrJ9Lm4X/vLIWDoHR4xCV6JuxMh6pd Xp/X+aqc9opgvQIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSE aZYcdXbIwln9/vuaHrGqw2uD/DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGNhc3RlbGd1ZWxmby5v cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXAN u64BAAAEAwBGMEQCIAox+0PTIggFP+UhnqQFKAIwAjNTnChOhcBRzmGqXN1kAiBC QpciSVxheO1FXKvneNR1tRvxiJPob+LExMm2sZxuogB3AAe3XBvlfWj/8bDGHSMV x7rmV3xXlLdq7rxhOhpp06IcAAABcA27rksAAAQDAEgwRgIhAOqkBFT7wAkh/lvs Ec1DbZY4A6wQXT+Wt8KlqD7GZYjAAiEApJRfr/A+3b/PR5yWn4Btko/mKLigvbIo Ssev0wNz0UYwDQYJKoZIhvcNAQELBQADggEBAI515XIdqfXZsFcU+myMYEFtkxmg wnCn/2Udbw1RM7uDG/MkHd26IyZs/9ZBkyYCDQ9DFdKOBO9S3xv7uWQGdyb2bv2d BG7cP13VFGuQ8rbahaN6Z+JyevBb0S+zoiGnaHOOEItrsjB49NhzZcfy2KReQyYH 8WcVB7qTAak01ml464veBJ4CbLRA1YR+3zm67YbVRLGV6MsFA7Kg8iCsBKT+SfeB EaNVnLRYkFk1mzExaS0uVEBbHc9BrG4/ON3+dINI4CnPOVXezXKRwMEnpUCwLD7B qlnjUxQA1un3HHZBivA43fkGoW5qPnOKvZH0lNFjhqinBxSJkiKYKSr8gcs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1D+Np1LfBnmXJ2aKtx6O 8ngmYxyEVNWcnu8FBHrY0bz/ibnhD7P3T0FWGledWXCrktO+rrcG2CkZMV67STZM xoN3YK3KP/eTUKZfBhb/3gcx1+/MCSCHkKb13m9levDuOliLre5Vsl6zjw4odHbA 8sIjx+zK5rVJTBkVRIZjQHPiv2uGP4SSVaFC0jUjG9LzM2blRe79jJrtjaEUfQHy u0AI3PYi7kj1wQuaDNqusUX7Qvbf9eM+PpA6JXNnwZJySerr6G+pj/fjCNqRpS2E UDXBqN6GBvi37z9rryUIaIlzNzbHW9kZYnno7cNOCnqEAzc4mQgnbn4z/9b2UXU1 P1i0xG3Rc0AYBdGIKT9zZDX1TBZGFDJAeeUohOFQ+k09+FcdHTwRackKFBiAKnv5 pPzlDOtdQ1EQojCpFxzrucDRc/bQ7v9VfoFlc/2BHuh60dRZ5HvMvTjrEWpUGQHp bB5U7DP4Ag9LCGPcqG7xCLfEpFcJc674lOz+DiIveoZBJjMXaKEUHGBWgpdaWwt7 9Ygn2+7oJCvSD6yoqUgxki8cDYEH2AA8Edq308ObubTajnBZkQ80HVEfKAlocSjC a4dP7x5JVKUTYQfmTjaxdILaEAmZxoRLRqtUl1odd5AsayfS5uF/7yyFg6B0eMQl eibsTIeqXV6f1/mqnPaKYL0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316092146206221594476156384148764562216204 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 00:06:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 00:06:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelguelfo.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865897335325413658373320883504176468440562393778463894046498608620163451196326273266901160184035852978351868414634664384824093292037366964149517938998178654608669343568622531691630533768521634833489108397709149637159149021115675389951975930331461377014322367627538724816681311573511419127650206936542334929922520761542563254898833188021703951842509549475866415348335743709479225357233374935217192521076268701221609520822308756779210733172687943548103588930255621142920369413635455324082372404291812810907683136143474165115328272812281151484059818495103291219509830033029182933677036464471078878863756084453497907946689354007000228643283262950627444893631975654338765270351954977497280170607625586635218599063417676472754796598183284287254778530705285585903631435776099188959691607456212761879528637627296252926445201004598303880596286952295627319916179034935919990646018947743667962147177802521902477986129497958151580767917539392794739825155151460655357523545024191718342055048017255440014406173895249167355596491179260906947308129548665257570011513546892524119473137842450205581378217460684341320074820553520521975600893348736090953971229992138698389813912256101778457208035589110539031389253885525593126324701004131022553800663229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8469961c7576c8c259fdfefb9a1eb1aac36b83fc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelguelfo.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700dbbae01000004030046304402200a31fb43d32208053fe5219ea4052802300233539c284e85c051ce61aa5cdd64022042429722495c6178ed455cabe778d475b51bf18893e86fe2c4c4c9b6b19c6ea200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700dbbae4b0000040300483046022100eaa40454fbc00921fe5bec11cd436d963803ac105d3f96b7c2a5a83ec66588c0022100a4945faff03eddbfcf479c969f806d928fe628b8a0bdb2284ac7afd30373d146 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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