uggianolachiesa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:17:2a:0e:18:be:71:e5:b1:ac:57:f3:e3:30:fc:05:74:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uggianolachiesa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:2a:0e:18:be:71:e5:b1:ac:57:f3:e3:30:fc:05:74:de
Serial Number (int): 356331538936067988054912836472401402623198
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:f9:f6:54:33:cb:75:2b:1a:c5:09:de:49:ad:05:a4:a5:77:81:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:2e:56:52:c5:e2:58:77:09:a1:79:58:7a:df:14:a2:bd:18:6f:16
Fingerprint (sha256): a5:fc:a7:e5:eb:6c:0b:d9:da:68:6d:42:33:64:6d:fd:c5:28:e2:ec:76:30:db:f6:84:98:c7:b6:f4:c5:10:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uggianolachiesa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uggianolachiesa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uggianolachiesa.org

Other certificates including the domain name uggianolachiesa.org

(limited to 100 certificates)
www.uggianolachiesa.org
uggianolachiesa.org
www.uggianolachiesa.org
www.uggianolachiesa.org
hoopladigital.me
uggianolachiesa.org
uggianolachiesa.org
uggianolachiesa.org
uggianolachiesa.org
uggianolachiesa.org
uggianolachiesa.org
uggianolachiesa.org
chicagobirthlaw.org
uggianolachiesa.org
torricella.org
www.uggianolachiesa.org
www.uggianolachiesa.org
tiggiano.org
www.uggianolachiesa.org
uggianolachiesa.org

Certificate

The complete raw certificate details for uggianolachiesa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp6QVSLwbuGsyN41oS23Q
3tDTa800RQgSc6J7Wx1c+iBMoTFJop94ll3FNrlQ84QO81+4z1dOaDM7vTsu2NMw
aEiu5avDXzKCnSrd5Jx6ZkDhK34CtBlsyClCJJdHkfYWmtgobU7tgDzKeAnhJ5+2
Up0X0jul40oXIhX7twqWSo5SeP/I1lS7EGp+Mbg3JD2ezYUdQ+YJmCRvdR4x5y4A
YlI+ew1zoqIyK177TsibtYqAEvglJzb7U7NGOOMpUEALovbzhkkpSpUJt60oGUEQ
cbvbZJSCP7RRAvlVo2SRW9Jsg2KWGLvzHhp89KbRpzHnsnPQE+Ff6owd5EbFAwA6
ixcjEhLdlqyhz2x/Rjr6TRRrxjbcPhUWZdWmNHkAXbJuTwaMVw5hTLS8xy3VEu4v
AThObhpRj2JSGpUvYMudxaR/H6mlHmwGrGpNkkpIVZ0vHC+rVjaqeVlKaAbIWj+/
ebtuWBsclW3nwHI5J1/3FIfJU5jP5nr9u3s8d4RqtHebC78kqLPYomcs2qxiNRIV
hOzzKEkmw+brUdPVJ+6o6m3VcyOFt8aM0fU53qRt0sFSLm+GJ2sdxRlndoBiYiHx
GyBSoGNrFyKYBqC232xCm6+1LkYsg0OrfOK/u9k/2ruHswIayW9WDvcTD7pdNJOZ
OwaRG5jMJn+FW8CXkfxlLUMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356331538936067988054912836472401402623198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 03:33:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 03:33:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uggianolachiesa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683915406286041209348677376470985419320589442824181245205242846925648034079613440140464599387078481529365363717375412306704743746870512803926796324998886682143835175804980000398121254325062763695004578683268369168652441711460437575734918808964406760528608145666080249183745713899157670112882320240587730083440051445452045090461284372303952843859170888445077886055064800586469733705739547747187545500019098369420242973745315513620633751993613349642181252457069468108502540684516159949575524404279673941963160910498130320198739391239643156373605665242908855925556998547560899222592068059864059704019752030432557866690060503890664088942792751205888401873546864999714990799254476365949866516991322496120961214492346013946653489692130581171213140395709657603482552283965116742396732617311828160815607177664217105375852394340126051590961270138055918432646530826983534304348914206084935693323642070733505434873828366950249252422594530947656189953284243411446404159052711330914261740484960057758681526480506166668058994161641359989056287763067150189111847879872913099438469626633233141993213522779470744843348847892568228298481969155133550501598838817647334669414853967688203769637600851311876820935501864380480510668617101972186897458736451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6f9f65433cb752b1ac509de49ad05a4a577812e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uggianolachiesa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e54fc11c0000004030048304602210094d4a560baa16cf0e44d3fac2043093500f78d4d4b1bb38d66490b5d4e3894e1022100b948807bf3b9c42c70d21e63db2c3f5b274117b2d6b24b85e2c2bfaea0d533ea0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e54fc11bc000004030047304502207567ca72a8d2be147511ee9ee30afd9ac465fa075947f972b5ab35ae601d984d022100d925ed89387d6a8b52acbc7047d91be7a06a8ffed59ab92f33e2f1575b0f627d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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