cassanomagnago.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:c9:30:cb:11:c2:39:ea:b1:24:7e:06:a7:ba:48:a5:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cassanomagnago.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:c9:30:cb:11:c2:39:ea:b1:24:7e:06:a7:ba:48:a5:e0
Serial Number (int): 309243817340350240999934087247656968037856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:22:72:f2:fa:ff:3a:c7:22:3e:5b:b8:a9:6b:a0:48:2c:04:7e:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:60:e1:32:93:2d:e9:be:4c:ac:54:d8:a5:9c:d9:d5:24:a4:70:25
Fingerprint (sha256): 9c:a9:61:7d:bc:19:92:dd:78:0c:a6:bf:77:04:2c:4f:21:2c:9b:bc:92:6a:5d:a8:99:1b:37:70:2f:5f:e0:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cassanomagnago.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cassanomagnago.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cassanomagnago.org

Other certificates including the domain name cassanomagnago.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cassanomagnago.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309243817340350240999934087247656968037856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:42:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 19:42:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cassanomagnago.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924552832195424733683982169279297331079575529343120749752970367065887301659586478122598721121180536105942058589707413338427450195514432608705237740381336088430958887408151713737873928688302207403489612132964607851042318328488784134791339367074985692408947083661639511968545800264993367294123021615393017564882012663301175942382194600788598637579641598164810114084709413829701221557831720295401374394929267676840098979553825041745484307410040975880816709608076367263620937261657794923328162272522464474944780200668324897106243023867678379919260833546641265722154460716129405267373985192767398368553296203068901171322496579380425568717216520152792503977650872571583442030097063809552195908497173787064391309478726325779031406127784394457548693628323492979378872239799214241619617954116634811899718902595879428322353602118263824022991081702162721586265022809316564634078760807757507796122012203933467708936196995482202881850301230660147742652889187037409356610725933940593083370209329173477620509699957976866608368803812212417014594159736393139169822780411820965615645785693900613899796207385387237345230468907430528377333743071788785520862184030565003337006141909169640713667864266815655499078420391137133109429446292681052243210050107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e82272f2faff3ac7223e5bb8a96ba0482c047ea1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassanomagnago.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed2a643390000040300473045022100cf507b5d5fb395d78c806ec1b81ff5d602da8b415280b7e77b9bfdefd1cdcb63022054afc0ef0a4b20659405b53b0d52fb6703c78dccdd8a86a6d6c600cb43c55f48007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed2a6432c00000403004630440220736304b8cbbc15f257b5092f741393f35e862cd52cf1ae538822e897c7b3cd930220555c7c9590ef0f98540ea6f2878a29a5b6a50017e059a7c16f7c9677d8665a76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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