strascinato.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f9:55:ba:31:d0:58:d4:ec:c9:a2:be:7c:9f:e2:23:42:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=strascinato.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:55:ba:31:d0:58:d4:ec:c9:a2:be:7c:9f:e2:23:42:09
Serial Number (int): 433293404247557089789246487656945015800329
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:40:2a:02:a1:15:b4:ad:bd:32:b1:8a:f8:9f:7b:76:49:86:34:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:b6:79:a7:0d:9e:4f:be:4c:c0:2e:65:1e:84:20:48:4a:f1:63:01
Fingerprint (sha256): 9a:81:e0:f9:e6:87:d5:54:d7:9e:ca:fe:d4:85:d2:c0:e4:6a:d3:9f:8a:2a:7e:16:f4:b6:82:c1:88:35:b8:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate strascinato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strascinato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

strascinato.com

Other certificates including the domain name strascinato.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for strascinato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433293404247557089789246487656945015800329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 03:24:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 03:24:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strascinato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940430013079186555239745630391061336151497965047563605174277720087670041520446284949880451416023130164612727249510785894695467695571531846600407754599746054206790061353258178146308950727370305431148547599386982188818789239758975780570356301225366571002198829683640343046685826264170222601591685335099626273644752294315933912043588878633866264055978895686500196357235534270285799634365383382931715909646478452582000648273732090651936550118572367053990697627259044229901373140683651303679289857811219155727054087132259725654904594146030064704339568842201609387691779779903865377791394992919825207743364559311264378276532662352477444222591197654154284587960504369812292169310699643536939018146803033937964271817660389688248653551249747189623803403581682626485183171610478915552714615486571469703825829318010974126892084435563452771985387100957690047170986802647210592508741246726895871819058029423265400085352242582771468682901980890997423443045544118899110749116864950013781914106705173733206723501713105593379039493608206223727092308586493362727611518628348308844005632139967994321370670758269705847908097866071858071375689537813617203829422179623289070851437660328788645640754948674308214811126217640511130359722633635408656336384649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11402a02a115b4adbd32b18af89f7b76498634e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strascinato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017152e2254a000004030047304502206db43c41e0886828aa46d85f2fe09c75731542a8a02156a063876baabfc1d240022100ba3b194a4ac5b83a193a8731d1003ae0b3194617bee0a9293d6bd56cef5314a100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017152e2256700000403004630440220376b3c0a1fbe29a066351d327130f8fee0b5283ac96df6ec665a8d359590aeb70220035cdc0b2852137f3cd1189cd84c27c0ee20f7441faa1d45c3d3d5e21e541415
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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