agriturismipavia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:05:b2:2e:40:f2:9d:8a:72:fc:99:95:3a:10:a5:65:53:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=agriturismipavia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:b2:2e:40:f2:9d:8a:72:fc:99:95:3a:10:a5:65:53:cb
Serial Number (int): 350387398307847073014733621300945016411083
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:e5:8c:08:4a:44:71:69:ce:5c:36:59:5c:67:5f:91:11:cf:1d:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:1d:8a:b5:9f:ef:7f:62:e9:38:c9:50:4b:72:c0:39:6c:36:55:ae
Fingerprint (sha256): a6:a5:47:22:3a:86:9b:de:3b:ba:c7:a4:67:43:b3:00:df:c4:80:67:95:8d:32:3a:4a:87:26:8f:d2:87:9a:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate agriturismipavia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agriturismipavia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriturismipavia.com

Other certificates including the domain name agriturismipavia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for agriturismipavia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwQ/5nsryhxghmmbxRBMM
urglaF0NwHCvnDxqFDoVLuRTUEiUWqs6z72/uFR3PC/Z+mAq9lFguc3dRS6aNmWr
ejy9f1pDy7GhLOtdC1K06qNfgfClOeTwjLf8CqrFOlHY678by5H3eRK/EEkAtAm8
vr84/wxLlbPlIkWF7ZIjO/GYGwGCQ8fFOFgbjyVRlPGV/uuY0KLoO/6Jpe8+GQTN
mfEyeJpwnzB8m2p+qga/iBzU+rCzHnI9mEuS9/N+5+RC83kppvGAfi/w9VzHNR0Y
ljDyKQClvodoSzhlXaF7RauJ0UUsc1VFp4fRudJSkO85Sk+ngUjbk2LkpG/UuAiW
gAv+lNyGw7z7jH/3EvmgC6VEFqKNyYUUzKoEd2zKuG1oozkPQUMgsVTqKm2QQV19
FCrFDPOJI7Jxs2ORhIsptyctbcGQuwt3K6Mwb1EUGQbqzEc2AYSvJcWUB8yFFxp0
wJ9jo3ZU3t99N/HSfhMaa9jwVO3c2Pq3cz0cHc8/VCq3b/de61Fbm/Bz3pqWKsFL
ZTTWQKpjVs4sH3IPXRNkI1KWz6eC6On8MNKRe2j0QVCNq02YJWfIoggRq8io5RIX
7B9VIf/mx+xT5N//YHFfhXtdkpLQDB+YphNMH/wFbwkhIg0Qb2XXxkHaQIOQfIZ1
q5OndPHZNu3/kr4WGXZj6Y0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350387398307847073014733621300945016411083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 06:21:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 06:21:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agriturismipavia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787625885742096825009753121574381281763127991421813984021244426084800927676562428483316470545642733831943304627185465114396280851038198856248596916734700066001185850836883015355783630183615697347079073106444699170510831933917601291762682563126872682924854324551242661524446797953684958226735061306445569518412379745422115663827990963105825938388950739073025856105714159877369197999213286049365378485118127019420626965004439746386030522039274180495589184899447328895224369167020007315450180291272889280835011550318272202789741632894089073497455989344500135931139672383996266640335750938760107817761150646589756743175125727602339794958330397921728458945454511962821493978952474831091349579474001286351162406337552393839002390480741482339161498563247840141004617738372123050313358031972156158215233178299865254833654107291184215845153136286352190062273945923405562624263559570690876577980776987522992580904971207764511356884546963407760372762916263729482849629007695861320669351871471091932076085513378365237040302861909207005211934554731257304616252757568799497778353286180678414206751499236248521997467426930751850041536475235632943932469705177151483680060253795419649024928220331252185948733295281303885321680695760164085932665072013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abe58c084a447169ce5c36595c675f9111cf1dcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriturismipavia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017162f74d440000040300463044022005764b2402aee0cfc3aba8e3431b1200e97590bfecd376a22a238c7d1bf65282022071e417d835e4077e748b5ead4350926cc06ba07f6d0c91beb374789cd50f063f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017162f74d33000004030047304502204b1c6f8cca9ea5a8b016abf0b191409971fb810e8205d0ef97106008c9de93fe022100d8e83bf987a092f100a46a0b42643c3c41618eff08bcbfaecb48b4d09c4c44e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040f07cd023ee87987b21a4884b50747432db452daeaff46efbee1053536c5bbaaf157d565b7efee2fc119328838d7d8a4011e57d105b2858ff3b20f726c59596adc49c32fd0de3259e0d0f81805ac27e1c84e212a0fec1b71c9d023562c0af7e928712153db4eaf9b30479c7f1d46a315178dc36bafd05a315c3f1f88f424e8abc37c39b7f7a6d2f51ac266dc6ee998dcb63511ea5202b6852124b975cdacfbda9eaa5bf2a8ea8c4188c13795f85a6ae9e71023bad80bfed1f045812a82e1f5fde4a39a470da82e2a9a962385c9d1d82a6f45fe5fb62f15b106693586c194fddc8e89c254a2a766dd566c73beaa624bce95918cf0b617e5e7c62815e187cfff9