castelbolognese.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:c8:76:c7:0f:6e:6f:9d:c3:8c:4a:3e:80:ce:19:60:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=castelbolognese.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:c8:76:c7:0f:6e:6f:9d:c3:8c:4a:3e:80:ce:19:60:ea
Serial Number (int): 305159463088769265398686042746235699945706
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:0c:73:40:b5:e3:0a:d4:87:d2:9d:4c:23:7f:fe:59:fe:7d:26:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:36:82:67:7d:17:40:77:98:9a:27:ac:7b:8c:1f:17:5e:76:1a:2f
Fingerprint (sha256): 97:c5:09:9d:a2:4f:a9:f6:6b:88:bf:ed:4e:50:92:67:ed:64:7c:36:c1:b4:7f:00:a1:f1:ee:6c:be:f9:48:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate castelbolognese.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castelbolognese.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castelbolognese.com

Other certificates including the domain name castelbolognese.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for castelbolognese.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305159463088769265398686042746235699945706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 23:40:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 23:40:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelbolognese.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788175535586887505390995735159169996972328648757590758462860458842077033651020496477139613235007240541076979234145172486388898652823178642575064356181700009375948176649061679155506283635185965313993200658566262255869804355498057623071199004126658496547173119316861706470811128076385301813841291315680293559743599928746535879454858267274128647855347818811208551197599344337976127565271056042806110996189545913017409441436233404013268467610187029020429390795812099415107475653496464119250097432598116855538100908044702979576205590730994259747155997301875187135311231647961957751785953310549335801434445242115519436997650406116989309714418170123033809796948221754153860230432925582466047762594982147565902491155935589634898339427699134922166628719564158996564020346712568249888155498899384234067480255529330550731527479984089899235427865244744704832403130155903166418611370217127891412930923599726309821895156754501268791113496035621747377923208544716983630218804483888166071027251678472369383637858549222669396816455257719298895829042900152824455768144495961709145949255889525978928878724997626163442489751184488329032267323667693635887293060685280441314787410286433084259200596774307918988514260211802491090014847580231135539378763213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							180c7340b5e30ad487d29d4c237ffe59fe7d26e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700357c635000004030047304502200b963d3dbd506f6895d0720705702ac1e002df4da7a00ecd8a5ce7d20784d62c022100b15329e1d85769223c3390e5cd941c0141be7ffe879c121acb2b1e6b860618df00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700357c65a000004030046304402207b1bff2bc5ecfb67e20fec62f98f6a53014325370a3722d5fb36c8f36e3cd3f80220030e097e32c37778c54907a12680464f15cfa712de8bf25bd31b0aadc6b2ea5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027630d8bb9d11f83dda7a6541f8f248769c45f89c7fd0de5814c8f1ef728f37d0ee45ef8b2a50fc669a4bf3c2b15d2bd7ec1340f9d640a3a9634d8be10e52ebe3dbbe35f43b04d69f46398029416527cf0365496c4c149d378ba22c33d8b3700f429aa5e998b926a5d9e6f2dbb7f1df32edb74bc8492243afa0c7066554867fc5dc410cc8631bff6b4c4dd4a2abcf5c4f60c4ccaed5af42e058a51804b7dba2431b943394b160121114576d7718c6e74d8655a8490f980d83dcd1e63a01cfaae378d333b2094207d9690d3eb6da4a26f82fd5f8a160fe2bd7e6ba8c36e7b8fca1cfc2b216f924df840cc37e730383f7160c1cca500d3dd1bcc89eebad5e6f82d