www.caratebrianza.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:34:a6:6f:b2:8c:72:7b:6f:f4:69:af:0d:e0:e5:c6:90:12 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.caratebrianza.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:a6:6f:b2:8c:72:7b:6f:f4:69:af:0d:e0:e5:c6:90:12Serial Number (int): 366365058620577662807040965589881906958354
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 87:4b:94:2e:1a:ce:31:b3:90:6a:4f:d4:f6:4c:50:c0:43:29:8d:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 08:7c:34:6b:e9:bc:1e:e0:24:b1:dd:42:c6:80:e0:ba:24:1c:7c:f3
Fingerprint (sha256): a0:4f:26:8d:a4:98:fc:2d:19:54:43:4a:10:f3:a3:40:d1:4f:bf:7b:21:ce:af:59:fe:49:09:2e:89:8c:ee:2e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.caratebrianza.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.caratebrianza.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.caratebrianza.org
Other certificates including the domain name caratebrianza.org
(limited to 100 certificates)
caratebrianza.org
caratebrianza.org
www.caratebrianza.org
terrorism.exposed
www.caratebrianza.org
caratebrianza.org
safecasino.co.za
caratebrianza.org
www.caratebrianza.org
caratebrianza.org
caratebrianza.org
www.caratebrianza.org
caratebrianza.org
www.caratebrianza.org
www.fontanafredda.org
boater.world
caratebrianza.org
www.caratebrianza.org
terrorism.exposed
www.caratebrianza.org
caratebrianza.org
safecasino.co.za
caratebrianza.org
www.caratebrianza.org
caratebrianza.org
caratebrianza.org
www.caratebrianza.org
caratebrianza.org
www.caratebrianza.org
www.fontanafredda.org
boater.world
Certificate
The complete raw certificate details for www.caratebrianza.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISBDSmb7KMcntv9GmvDeDlxpASMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQwNjQ3MDFaFw0y MDAzMDMwNjQ3MDFaMCAxHjAcBgNVBAMTFXd3dy5jYXJhdGVicmlhbnphLm9yZzCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMgIrQng3cjnSZhi3Hf9m22h WmNgJb3gngitciqBIf0OT6vfGVBhtkzzJ21lZ/MjIqJZmNx9xeQLaTkxEAemN/v4 A28yvdi/8n7Nl1pyv1KcGY9DW832jSzYK9N7GMBTQhc0HQlboJT4kSYaNs6AtC0E /geXlZCCcaWA2B7XP77RJyvilz+Vm9B7A83taHIZLcrvfmOVpl9tfRE10TYXV+ML RQxUV0MVyoaylvHaDW7kJ0ozq0gGBtpdni1Ftcdp5l67EVvBpuytTdzhLTI9HzFr qIu3k3B7rg4Sk3/Lm5q0X2M8X7WjQlyq89UVUGALa/p2npd3gawIoHmRBZF4CGWc ecC8SjT/++ClGQWrUmboaCWu3Eo8b9GH93sHvfvj4sqLxj213nsKF3mHmGjn7QJq As1UINxsjk3YS9unOqtuK5Ublez1il8FohsEPUWe+K43zIoD2XbflS4j1eiILU0/ RP0Y66WLR1Jj7HuRckyZkjWMfBDkObTPHNlLVmUKYrNwz77GTBmBfG1F5j7Lq+SN ZFbRLBlaJVwpI20mCLtkKMy5MZ3ihpWsb2h1cqYAO2kop4juVr3vBdNe1G4Yl97+ XthbDJZhvFaZKh0wzrXzwxhtIXmO+8D5jfSO7+qgcFRpAV42V3+CAxhBhDHx4ntg DNuiUxx+fwvldIHZ85FfAgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFIdLlC4azjGzkGpP1PZMUMBDKY3BMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmNhcmF0 ZWJyaWFuemEub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFuz+BqWwAABAMASDBGAiEAv2/b/P3msYKYCwnDf7L1Di/9y4t8IV6W La5w4CtA0IMCIQD+bw4zGdT6WlsTrOrI9G7Qt40kFZST5rP7zcN25lhGXAB1AAe3 XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbs/gamkAAAQDAEYwRAIg N02b3qByG/RFcKoA/DhR/XvXycdzT+UvZNAIEFyTj+4CIHta/htIlALxTeCf6ZAj LdgRnsieudtQhnMG8guLbtJYMA0GCSqGSIb3DQEBCwUAA4IBAQAy3uq8suSqva+D FuW3c+0LN3+zZc3bTAUmHeorfTFsrx2eDc5gb/87A3+h0c9YIapZPG+LZlFmRygH zA5Z1K9mytCAqQIpfGJP+F+CqY9hBfig3ZTZMHFuHIt2oKRxk2PSUMIPJzywndpk eCvoifRuYWePfHZyDqOksCRMaRXLW0Mo5XQ1JAmaWAh+DGjGtfBPJkJrFBMzLH0p Rn+afNBenwvrOL1cRPTbK3iYGcgfmdKsFcHYP96+WGHxSTMbq3ddIWJWaxMFXGpd PYcM8cNLLSgqQNi8BxnD3UZx6MaYH+kByJK4OLv2AtGg+sg2d4vEN4Qdf116rP8t VQDw8WPw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyAitCeDdyOdJmGLcd/2b baFaY2AlveCeCK1yKoEh/Q5Pq98ZUGG2TPMnbWVn8yMiolmY3H3F5AtpOTEQB6Y3 +/gDbzK92L/yfs2XWnK/UpwZj0NbzfaNLNgr03sYwFNCFzQdCVuglPiRJho2zoC0 LQT+B5eVkIJxpYDYHtc/vtEnK+KXP5Wb0HsDze1ochktyu9+Y5WmX219ETXRNhdX 4wtFDFRXQxXKhrKW8doNbuQnSjOrSAYG2l2eLUW1x2nmXrsRW8Gm7K1N3OEtMj0f MWuoi7eTcHuuDhKTf8ubmrRfYzxftaNCXKrz1RVQYAtr+nael3eBrAigeZEFkXgI ZZx5wLxKNP/74KUZBatSZuhoJa7cSjxv0Yf3ewe9++PiyovGPbXeewoXeYeYaOft AmoCzVQg3GyOTdhL26c6q24rlRuV7PWKXwWiGwQ9RZ74rjfMigPZdt+VLiPV6Igt TT9E/RjrpYtHUmPse5FyTJmSNYx8EOQ5tM8c2UtWZQpis3DPvsZMGYF8bUXmPsur 5I1kVtEsGVolXCkjbSYIu2QozLkxneKGlaxvaHVypgA7aSiniO5Wve8F017UbhiX 3v5e2FsMlmG8VpkqHTDOtfPDGG0heY77wPmN9I7v6qBwVGkBXjZXf4IDGEGEMfHi e2AM26JTHH5/C+V0gdnzkV8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366365058620577662807040965589881906958354 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 06:47:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 06:47:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.caratebrianza.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816067074207328707970158370404167372654922568509439975239843590463179201219667991296808248110985768516237034915042707344112486175872705875667523257867593389895524636720105113743797769194440571900541797714576541052412929187099489335601501290576505833279125025784369569715400152659455569403529692201607112729576769452013095383564792936985335746756990337439390674936475072432502681976717742406598155422579221749575564698016630712026517223832772651921755294608219570335889170615039154391141834897062100745480175217779280682321850559955201948714425977632646414166244677485999350539025131851749503262875550126010584385711423426436776209327776511074177783990231693365497150414473929883417772660329138168073962819415268935561328775355987195510701203209873408551129872353807106086385614725976455311025456162231409022496383777103527538871851338806499121256877639129905342292281784084233224542589641408784002113693456472358556453137708189222234002617318488464322787066973418677018483400118341571979527229283396056674719202814727138114650955759146283685483729576787174831407773194684434189458118317087308846294698909948107451607485531660991573527084485195687970333372742242420167990121421467284570431526294798698563898740576807812860280541778271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 874b942e1ace31b3906a4fd4f64c50c043298dc1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caratebrianza.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ecfe06a5b0000040300483046022100bf6fdbfcfde6b182980b09c37fb2f50e2ffdcb8b7c215e962dae70e02b40d083022100fe6f0e3319d4fa5a5b13aceac8f46ed0b78d24159493e6b3fbcdc376e658465c00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecfe06a6900000403004630440220374d9bdea0721bf44570aa00fc3851fd7bd7c9c7734fe52f64d008105c938fee02207b5afe1b489402f14de09fe990232dd8119ec89eb9db50867306f20b8b6ed258 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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