casalbruciato.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3b:fc:fa:10:5c:d7:f4:a9:6d:8e:67:28:77:27:7c:0e:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=casalbruciato.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:fc:fa:10:5c:d7:f4:a9:6d:8e:67:28:77:27:7c:0e:6b
Serial Number (int): 368862067236403168102565104776707042971243
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:d4:dd:73:ca:0f:99:c7:a9:18:a8:9c:7a:af:4c:a1:94:35:f4:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:11:b5:f2:83:93:89:13:a2:06:09:5c:65:02:dd:f7:43:6f:18:40
Fingerprint (sha256): a0:57:55:19:46:74:ee:28:24:9b:86:1a:32:b0:83:d1:15:fa:de:e1:6f:81:00:2b:bd:95:75:f1:4e:0e:3d:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate casalbruciato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for casalbruciato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casalbruciato.com

Other certificates including the domain name casalbruciato.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for casalbruciato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368862067236403168102565104776707042971243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 12:13:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 12:13:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casalbruciato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790662397970038332981573056301973155067168217566410228985502830310469648333692761987331275264526188129622504549338883965990297566469372749752203714036438125919354733203374955358810767941425048397142651443310418269252113167147515226118724532983416285340128065536129974736403106778873645792633597907635767302914735862022258196114771406947691539247138527380407366423243131952773470442017271078715373243182186004544175925733194995525587494761313070292705480439258395129170241497543539544647164906914680577095199995906984111650624547886264331728464584544581834976322495863627579999302213036849869040065600491409156978969670945953656543744324339557696298058921557193566487722331030179039178467435951403665784694863848501296978367292401589499598997199321666524234888482246764721413128094721138192476299048294608194259727327145772236373662311398847246300201011157238581893049874598617868965163322927454895866804507226792608853986196655737813267617924467830488898494798253501563362620076177068499128732760187455407101027963083937292809291886470732427903409701791882267646940298465523195827043175567452062856365913069933303325609441409190055366575770279284405203313012812304209175120317147607744198449682386979680192263109755256950701033609741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26d4dd73ca0f99c7a918a89c7aaf4ca19435f4ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casalbruciato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896e48b38c00000403004630440220047d08f42323b688c67def683558fd8f70ee2e410a9c1fa1b21147106673b8b60220166b38400a28ffa1f2f155ac3c13c96487a06e173e7ce45ebd91559aeb55e2e1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001896e48b3c300000403004730450220191f4c8e22bbad7ddc2ea375abce9475b8a770f0b3e4041310172954aa1b6768022100e450ce11213f5476443d6d95a7f1c24e96f1270fdfd017cb28f1ee727d46050b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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