www.preganziol.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:bf:87:60:9d:f2:d8:17:88:e5:b7:4d:5a:47:09:11:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.preganziol.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:bf:87:60:9d:f2:d8:17:88:e5:b7:4d:5a:47:09:11:4e
Serial Number (int): 292216856285061322861823294993662669820238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:e2:e8:b1:82:ed:15:4b:9d:58:88:06:8b:99:61:ac:bc:e8:3f:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:75:69:c8:35:1e:c0:85:bc:c5:e8:3a:8a:14:80:13:67:0f:99:ec
Fingerprint (sha256): 9c:75:7d:5e:1a:0d:67:5b:93:3e:d3:c7:ca:d7:25:fb:63:21:0b:2c:8d:e8:fe:89:23:46:c1:1d:6f:5a:6e:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.preganziol.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.preganziol.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.preganziol.org

Other certificates including the domain name preganziol.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.preganziol.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292216856285061322861823294993662669820238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 04:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 04:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.preganziol.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 629272467563027268778859087001435513385418344766178848327698949978698164070939746060849631583104875456341382827413305527358048839426321456836822646647141786094249383354751820060681321752318996802620882677042862300790919517010042478551729566746233135297246899531730816573626449843733368752342296200713190431911842740282568670244259738682740054234286511134204558310868800798366326209109324974450907289234977375271961936738357871373134626256505838467722066460608873081031050170436920569991412754294109660608192473107325010395044478563708000473965878822542056373740774849181409913271938412302852611593057873102253983297931970194281114384453054891285453721919857993110866783612678763348861397347928893502547042111596122743787635838516338644957809458332547264075528530432328079376081600476400579793588532122647029479379279301640410726159076193106030585263602104948532553998845104668843680923990577604462610842856256873154437184847239599935957061635821319626207956701053249405267003103525919501736577936780582096572036537893922645035002471147434348823853122250780116146553296702978102272017829608949338561749349282482003660304982183909029624615629478069265301422087979744967854195100531599299876105071174729425722781570856017389929969168943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90e2e8b182ed154b9d5888068b9961acbce83f14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preganziol.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7b7877410000040300473045022025ba0ad460b18ada43defa8ca264b86696326a28dac300c297c650cd614544d90221008bf7fcdac6a572c9e16001b607e4a0e79bb52776bb6bc6d1d6a2c2d2fefd19cd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7b7877670000040300483046022100d044298039eb1e6497744ec250bbbd7b6acd26a97816e92307a0eacc681ac8830221009bcca9e79f7e183ff283134a4a03a53894bec014112a52b3cd1d639531438e3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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