preganziol.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:29:72:83:bd:17:12:dd:0c:0e:f8:07:98:dc:b2:3f:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=preganziol.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:29:72:83:bd:17:12:dd:0c:0e:f8:07:98:dc:b2:3f:ef
Serial Number (int): 306649505537411531854960091467791704670191
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:e4:3c:e4:42:0b:59:1c:34:01:d2:53:67:d5:4d:11:de:f1:87:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:32:e5:75:0e:23:9c:fd:df:5a:a9:fd:5b:4c:95:ea:fa:ac:9d:df
Fingerprint (sha256): 9a:78:ec:9f:4b:84:72:e7:60:67:31:9e:86:62:ec:39:76:b3:b1:d4:72:63:d4:78:34:3d:c7:3c:44:2b:fd:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate preganziol.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preganziol.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preganziol.org

Other certificates including the domain name preganziol.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for preganziol.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306649505537411531854960091467791704670191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 19:33:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 19:33:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preganziol.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658641605096522143060026356664975922408416169696214164036906939859127009005987879293376332829912986122515721352662108414292165555155642396087050258139857559142093393691306128021662789120655723002212277812214885179661422318077656877754369262688328357642700259518805028661248792491897415846332409798415715458711201167001583872989846252736023748835576291125593462688934841809821765532912991966276339573503506392362994428612570541824225343782364103793316780822709630201460556461279103422259248881104278810459671073171048450510576317364644063645693631546106343252541835830651205878694074444969002072926786879362658740871588050299568417814380980373726280276527068163159788483865969673190909001479978829511350281836814804286741997105911918994356723654479512265783172928371383020998861479217274758722937368128307261776017524148986695424715238785448851657448309360835407776511272066491418497552333815101188459670683110036133416528456566590062505283317172624819995272751492685470259176034651286703025904628077013686321796743302079643339081222043569586999510123359347061767921388044787234298898131953066678389969589799693346323068843269319988899036131875394032345110129587451870551125799997533829686244934764240387862722651363243051925386469081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bde43ce4420b591c3401d25367d54d11def1877a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preganziol.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3a49a311000004030047304502203989b4a3e6f77798120d8082f5b1962bceb151a69e75a4be733c4b59f68a1b08022100bca211794893db3e540d7dba02d13ccb799117107b7daebb1ae6bc490eab1fc2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a49a3020000040300473045022100f2ec4dc475a4b59c247b03d11c669c8779b1669e1d0eff81358180eb9648911902204cb5e74d413e28e6fca6e6b1fa0f941a1017ce12d30ed053deb057a903fd3d6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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