www.pastificiomaffei.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:5b:be:35:3f:1c:db:5f:04:25:c4:71:4e:7c:82:74:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pastificiomaffei.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:5b:be:35:3f:1c:db:5f:04:25:c4:71:4e:7c:82:74:22
Serial Number (int): 322709631205037226340630798358983351628834
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:ea:bb:6e:21:16:6b:86:8a:c9:21:02:46:18:e7:b7:38:f3:c4:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:96:91:f8:3b:3d:34:de:a4:ce:f7:52:01:19:b2:56:dd:54:56:64
Fingerprint (sha256): 9b:be:19:7f:d8:2c:66:9f:a5:54:4b:59:de:99:ba:2a:e2:03:b4:58:62:d1:58:81:be:84:17:a9:06:5e:a8:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pastificiomaffei.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pastificiomaffei.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pastificiomaffei.com

Other certificates including the domain name pastificiomaffei.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pastificiomaffei.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoPGNzmy1H0zjy3RTPbDT
6wZEUMgslz6OnxkBbCpZBB7v3yHqI2W1Mwd1yiuV96GbS2aIWzTQSq0v6UbpWPg6
vPbVZvRVvZXOFHkXXnB4XqPh3fhF1lP45Jhiw73emiezRies1qFmCIUfoSRb4trC
tu1PTqvc3M/UrlL3irlV4Z7vtY/G+dnnik6HqkbXpghx4IzuuQ1srN6tC33Dh7S7
x25iik6pHUgqjhV1URsDODZoxqzAgf9vv9SYcTlnVo6abtni21mwgKSVZRBTzb13
rIwNF669FFTXMJS8KG488baPU8cD+RtDzm7XM/IrUDZ69EAHUYeeJtqTk5PWT71D
k5oJUJ7zTyHoiIvjEOppX6Fj5U4PRk4VD3CzGsxIt/CWBJ3tju+fks5RUzuDjWbA
kM3s6Y17BcyD6ha7pUDABTvJJfxWSMvRDqadPWQFrk1DPxKTos6DfIIUCvMpe1L2
jk1f0eZhR3avPss/mVKOFBbd8kIol70XqLoapxCi58MbbgfTsfN4yvEaSvX3ZrxF
4LSA28aLTLkuXJTPNPOibTvuc1rY0f4ITlqcg0re08yW1vsf+oH65rQp8V/J21KB
N5Gi8h/7SITx16CWRLpyCazVI0AH9UehQZteh01V8+ROpi44UMbJ/6OZFidyF6DX
bOH6M8UueJJqSe0k6JGDRoECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322709631205037226340630798358983351628834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 17:24:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 17:24:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pastificiomaffei.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656592480812417026290822269997095006419517642718690955793422439769162545319515646810487782422867768449491084911133923245246829777709191227269401487663069165730790887005101537668976348957753283710701528929244534994835257702995730769655987421712395232597059228874483847281077330666728973647365659878164124259474795513351121319112293568708270747739221408412075421323394427631060676246312153161452162408761301241840378437330910827281805281055805313164950637257841207324235857106242920047593590646000018161425403864421861178442158128489679986306603866659391213288579928525500985630845934081167966668560704157390459026805399634355377981517445388341470395910720363534801533577522941337900005967711851421184564693030000926705604403280496845110947161473109689170454502785474742709680931009236325250532164984027003423271547539885705370202036596557588993743000287779078213312009342026476692975434699458745165113582956785357100460027182532698557292942397942864987018816085291062084457758951178718005849733623619068973281123433393415524468485855442760364160129906786658190176849273144000575339752562123641827072235861561907196469384382029654049241456704635047404992660498215662146281666714921184259073106918725206570292882172414530000143165638273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7eabb6e21166b868ac921024618e7b738f3c4fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pastificiomaffei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e09506e680000040300463044022034f5b285c0fa7f50ce2123bdfe1330a2c5bfbb733871c8546c09c3ef5a7a3a7b022048e55c28dedb5b138829167d1ba153afc25442dff31551381f64eb44c404617c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e09506e59000004030046304402206648ea3da0ab3625a7f2f8856b26777aa549cf44acb90fe15c607a7b02f1d83602204bff798a0ae047a04d2953df0696f74d50357adff5d0a1a9ce08f82bc6b7b841
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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