www.gasoli.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:5c:4e:c1:7d:a7:c6:90:5b:a3:25:14:cd:2e:c4:cd:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gasoli.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:5c:4e:c1:7d:a7:c6:90:5b:a3:25:14:cd:2e:c4:cd:a7
Serial Number (int): 280175085875160031271938542957881117167015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:8b:72:56:ae:6d:2b:7a:89:39:9a:d4:87:af:52:8c:a8:a4:6b:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:6d:d7:86:1c:a2:26:65:11:a3:fd:cf:69:dc:b1:9f:6d:f1:4b:c4
Fingerprint (sha256): 98:73:f3:57:66:0d:1b:7e:65:80:5e:99:4a:9a:a7:10:41:90:52:ca:41:9a:bf:ed:7c:9e:72:df:8c:c2:1d:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gasoli.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gasoli.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gasoli.com

Other certificates including the domain name gasoli.com

(limited to 100 certificates)
gasoli.com
cleanwatersystems.org
stemcellcosmetic.org
www.gasoli.com
gasoli.com
savoiardi.com
www.gasoli.com
71780.com
savoiardi.com
gasoli.com
www.gasoli.com
www.subbie.com
www.gasoli.com
gasoli.com
www.gasoli.com
gasoli.com
gasoli.com
www.gasoli.com
gasoli.com

Certificate

The complete raw certificate details for www.gasoli.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280175085875160031271938542957881117167015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 10:45:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 10:45:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gasoli.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903931643259896114569014519263001956876681188383405535107427515356776419527722741381377945749498874539753187013057646368006001289282991585133784855884047668956373028773939241591928539802972613576229026732913776571447099306814433539252368567010248683118743755174295568621152472554858547007810256415686957935223508584250611608329861797791530583155878640892855034501133322090734775805279328257631650037925534683470908183683418022135805805262469338583395902209536224960378525313559161582534489368010448322123203576274637911238561571889634106970476236201128382781276670399751328254554305684749346986300150397350414789034934944804989777066942075119330047176780184706927050294560387541105527602283878096730802698511455883735949007414267076970923485358889160778974352398313526024932115946784310203716896520366390801661068526607790723381895140936546912744627124072058684757074423637997374072110641067692596577198175994321482759617327787182355004782447775435480608480370041085704251009416188286446620672136769181389979778977607049386831992310881381894373732747087001151580714971323935369275857848599354231663885952659478129987638453572818739781829510751368873757835408917516784810211496105911993191151857461128583909677554738161360984579945229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							558b7256ae6d2b7a89399ad487af528ca8a46b42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gasoli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7cd6b156000004030047304502200714feb9f10948903a49c57b94879f1e1a282c78ae1d7fa264e1fb6d13087879022100989d3518d97bcf55af4f113e54d5ae3f51ab394f67bebbfe02fb2bedb6ae5077007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7cd6b14d0000040300463044022044d4874d2821a49a6b16a913622cadd6a696f7c7ca32f335ea0f639e768071dd02202340ad3815b5470e889a83da0ca1fbd19c347c5f8815319b9b6a40065cdb1a5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080b87360b36714bf687171d7e1d11caa5a650b2bcedb3d594265fcd107ad860a2dc425118c20d4cda15bef3af949c7fd88538f48bf1cc0f8bcfb3ae937725a1a78d1f4fd3aadb2eb48cb63f367392a1e64a1e8f46c271c5a52444612203bf8d655d1c5946529d7f7a81a5df954d9c9a6be59c7ce894fdc8d949322466a314c9377ec517756b8f9c2689e78efd89cf9c41baedd51aea3cfe48337a7c0ebb60fffcf298609db14204943e6f2c28997d1fb83b1c074b15f1bf96c31d96170f31aa0d8a7c559bbc409c84dea0ce42e6323fa4bbbcefd34a78d9439240be25a0cba5e678a286c0e0b5088fb7f96fd2af303f36c9f6b23426134ba7e5fc56992b854e5