centrisociali.com

Issued by R3

About this certificate

This digital certificate with serial number 04:40:68:99:fc:8c:8e:13:1b:9b:ab:b8:48:7e:86:95:01:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=centrisociali.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:68:99:fc:8c:8e:13:1b:9b:ab:b8:48:7e:86:95:01:b2
Serial Number (int): 370366254465265168171139405850077918724530
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5b:19:cb:53:0b:c1:2b:dc:22:2f:61:48:f5:fb:7d:76:96:23:c7:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:0a:28:03:4a:e3:d5:2d:36:8a:f8:5d:1e:ae:78:e2:a1:86:99:44
Fingerprint (sha256): 9a:1f:c0:3e:74:20:c0:43:c5:89:45:ea:3a:58:a0:30:91:06:e0:1a:21:f1:2b:47:85:b5:6e:0d:f3:b0:d4:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate centrisociali.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for centrisociali.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

centrisociali.com

Other certificates including the domain name centrisociali.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for centrisociali.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370366254465265168171139405850077918724530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 10:12:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 10:12:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centrisociali.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749617534872592954098401849798080822810635141204035894486971369676091883266771903772644866490380893473407973916094753142390079255856561642533277897490309424811325472839470921579441971127003561601729300598615702433596300772630867240202625561068664979242891166571325597544485371800239617392026337155947300600581143895650096597623401782868741931461117494640289934825091738201667745777352826811993649356159624901321162200409426670102037001996009093654486985606892156214647371164547037403497142507691301720328918711345913399355338734180036981820601952218674919222280821407610301136603452601720616014751342350752921471812980152094999994836131003192503986111986331475279209633523165599980690782347324558919168884754827215241308605169857120221839861771103593939782799232928581160616563787841447569538692114157862979975937911938420840309481610863718571843933314923904403141066582206561812226888464510434766865422523717743283327186881768844217076813275851986433710356986471923419201417420452113512968573988086479794817487238616896751677304456568260522017937936709458553896129311450654954940898410668439521729805236514261724039377047844414954400491489409616461511548527581358422350604213950157391171977232779064921746994534974293443043117898111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b19cb530bc12bdc222f6148f5fb7d769623c7da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrisociali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9435b8810000040300483046022100b854dedf1ce552df33d82740e14c65b7dce2e9d2198f356e4420d06c7b78101a022100a1b5040df20b020c50594ddd18387e8885dde87cba5057eceec12e42fc347887007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e9435b8880000040300483046022100e3efc0870931343f000ae2c9f6f2e183ef420f3d0a38380844f34007b31d781d0221008352073ce17fac4abcfce702f50b991fb4ddb58cec72c494cda58109158d43f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b76b8f5d422e200ca0c29861344fa11b413cce625b119db3318eebcfbf3a5c6e827304f64f37804a8daeb7e807376c37884d0d86b7c0021dc5bf11dc2491bc2c0020e59393aaa20cef157f55109f3b0398ca4fb0774548066dce9acda7a66d9ce4102b30d861bda2bf5cfb995afdc305444a5963ccde7e3ce291db9a20a6fc7ce96eb790003fd89bcddfbaec4310565e5d5d1fb57d021a261dad2045de0303c91129d1c4e7390eadf6052217ad25dcc69a20f73515808add08e01c062a3f367dddd65b707e6e236d7eaa4549760cd68e80df0cf17b3184ccaf7b58e7eb47aee90a77da0275bfa56aabc6a0b66c5c377a2fb3a2c1f093169d93d9928004a72d7